Public Key Infrastructure Specialist (Singapore)

Thakral One; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

Thakral One, a Singapore-headquartered consulting and technology services company, invites a Public Key Infrastructure Specialist to design, implement, and support the organisation's PKI environment. You will manage CA/RA, certificate lifecycles, and integrate PKI with enterprise apps.

The role emphasizes automation, security compliance, TLS onboarding, and collaboration with IT, security, and vendor teams to ensure PQC readiness and governance.

Qualifications

• 10+ years of PKI, cybersecurity, or infrastructure security experience.

Responsibilities

• Design, implement, administer, and support enterprise PKI infrastructure.

Skills

PKI expertise

Cryptography

Scripting

Problem solving

Collaboration

Education

CISSP

CISM

Security+

PKI certifications

Tools

Microsoft ADCS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

As a Public Key Infrastructure Specialist, you will design, implement, administer, and support the organisation's PKI environment. You will be responsible for certificate lifecycle management, CA administration, cryptographic compliance, automation of certificate operations, and integration with enterprise applications and security platforms.

What You'll Do and How You'll Succeed

PKI Administration & Lifecycle Management

• You manage and maintain enterprise PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and certificate management platforms.
• You administer end-to-end certificate lifecycle management - issuance, renewal, revocation, replacement, and expiry tracking.
• You deploy and support SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network devices.
• You implement certificate discovery, inventory management, and compliance reporting.

Cryptography & Security Compliance

• You manage cryptographic keys and Hardware Security Modules (HSMs) in line with security standards.
• You develop automation scripts, APIs, and workflows for certificate provisioning and renewal.
• You support PKI integrations with enterprise tools such as monitoring, ITSM, vulnerability management, and secrets management.
• You troubleshoot certificate, authentication, encryption, and trust-chain issues.
• You maintain PKI operational procedures, standards, and audit documentation.

Modernisation & Governance

• You collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI projects.
• You support modernisation initiatives including TLS 1.3 adoption, certificate governance, and Post-Quantum Cryptography (PQC) readiness.

We'd Love to Hear From You If...

Experience

• You have 10+ years of PKI, cybersecurity, or infrastructure security experience.
• You have experience in banking or financial services environments.
• You have supported certificate lifecycle management (CLM) platforms and automation solutions.

Technical Expertise

• You have strong understanding of PKI, X.509 Certificates, CAs, CRLs, TLS/SSL, and OCSP.
• You have experience with Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar PKI platforms.
• You know cryptographic technologies including RSA, ECC, AES-256, SHA-2/SHA-3, TLS 1.2/1.3.
• You have hands-on experience with Windows and Linux platforms.
• You are proficient in scripting (PowerShell, Python, Shell).
• You understand HSMs, RBAC, audit controls, and compliance requirements.
• You have experience integrating PKI with enterprise applications, middleware, and databases.

Ways of Working

• You demonstrate strong problem-solving and troubleshooting skills.
• You collaborate effectively with application, infrastructure, and cybersecurity teams.
• You maintain rigorous documentation and governance practices.
• You proactively support modernisation and security readiness initiatives.

Preferred Qualifications

• You hold certifications such as CISSP, CISM, Security+, or PKI-related credentials.
• You have Infosec or PKI specialisation certifications (advantage).

---

Who We Are

Thakral One is a consulting and technology services company headquartered in Singapore, with a pan-Asian presence. We focus primarily around technology-driven consulting, adoption of value-added bespoke solutions, enabling enhanced decision support through data analytics, and embracing possibilities in the cloud. We are heavily inclined towards building capabilities collaboratively with clients and believe strongly in improving grounded and practical outcomes.

This approach is possible through our partnership with leading global technology providers and internal R&D teams. Our clients come from Financial Services, Banking, Telco, Government, Healthcare, and Consumer-oriented organisations.