Senior PKI Engineer

HELIUS TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 120,000 - 170,000; Full time

Job summary

HELIUS TECHNOLOGIES PTE. LTD. seeks an experienced Senior PKI Engineer to design, implement, administer, and support an enterprise PKI in a regulated banking environment.

You will focus on certificate lifecycle management, CA administration, cryptographic key management, PKI automation, security compliance, and integration with enterprise platforms.

Qualifications

• Minimum 10 years of PKI, cybersecurity, or related field.
• Banking/financial services experience is mandatory.
• Strong hands-on PKI and certificate lifecycle management.
• Proficient with X.509, CA/RA, CRL, OCSP, SSL/TLS.
• Experience with PKI/CLM platforms such as ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX.
• Hands-on with HSMs and cryptographic key management.
• Knowledge of RSA, ECC, AES-256, SHA-2/3, TLS 1.2/1.3.
• Strong Windows and Linux experience.
• Scripting in PowerShell, Python, or shell.
• Experience integrating PKI with applications, APIs, middleware, databases.
• Familiarity with RBAC, audit controls, governance requirements.

Responsibilities

• Manage and maintain enterprise PKI infrastructure incl. CA/RA and certificate platforms.
• Administer end-to-end certificate lifecycles: issuance, renewal, revocation, expiry.
• Deploy and support SSL/TLS certificates across servers and apps.
• Implement certificate discovery, inventory, monitoring, and compliance reporting.
• Manage cryptographic keys and HSMs per security standards.
• Develop automation scripts, APIs, and workflows for provisioning/renewal.
• Integrate PKI with enterprise applications, middleware, and databases.
• Troubleshoot certificate, authentication, encryption, and TLS issues.
• Maintain PKI SOPs, audit docs, and governance controls.
• Collaborate with app, infra, security, and vendor teams on PKI initiatives.
• Support TLS 1.3 adoption and PQC readiness.

Skills

PKI

Certificate Lifecycle Management

Windows

Linux

Scripting (PowerShell, Python, Shell)

HSMs

TLS/SSL

RBAC & Governance

Troubleshooting

Tools

Microsoft ADCS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

We are looking for an experienced Senior PKI Engineer to design, implement, administer, and support an enterprise Public Key Infrastructure (PKI) environment within a regulated banking environment.

The role will focus on certificate lifecycle management, Certificate Authority administration, cryptographic key management, PKI automation, security compliance, and integration with enterprise applications and infrastructure platforms.

This position will also support the organisation’s PKI Certificate Lifecycle Management (CLM) programme and ensure secure, reliable, and compliant management of digital certificates across the enterprise.

Key Responsibilities

• Manage and maintain enterprise PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and certificate management platforms.
• Administer end-to-end certificate lifecycle management, including issuance, renewal, revocation, replacement, and expiry tracking.
• Deploy and support SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network devices.
• Implement certificate discovery, inventory management, monitoring, and compliance reporting.
• Manage cryptographic keys and Hardware Security Modules (HSMs) in line with security standards and governance requirements.
• Develop and maintain automation scripts, APIs, and workflows for certificate provisioning and renewal.
• Integrate PKI solutions with enterprise applications, middleware, databases, monitoring tools, ITSM platforms, vulnerability management tools, and secrets-management solutions.
• Troubleshoot certificate, authentication, encryption, trust-chain, and TLS-related issues.
• Maintain PKI operational procedures, standards, audit documentation, and governance controls.
• Collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI initiatives and certificate deployments.
• Support modernisation initiatives including TLS 1.3 adoption, certificate governance, and Post-Quantum Cryptography (PQC) readiness.

Requirements

• Minimum 10 years of experience in PKI, Cybersecurity, Infrastructure Security, or a closely related field.
• Banking / Financial Services experience is mandatory.
• Strong hands-on experience in Public Key Infrastructure (PKI) and Certificate Lifecycle Management.
• Strong knowledge of X.509 Certificates, CA, RA, CRL, OCSP, SSL/TLS.
• Experience with PKI / CLM platforms such as Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar solutions.
• Hands-on experience with HSMs and cryptographic key management.
• Good understanding of cryptographic technologies including RSA, ECC, AES-256, SHA-2/SHA-3, TLS 1.2/1.3.
• Strong experience with Windows and Linux environments.
• Scripting experience using PowerShell, Python, or Shell scripting.
• Experience integrating PKI with applications, APIs, middleware, databases, and enterprise security platforms.
• Familiarity with RBAC, audit controls, security compliance, and governance requirements.
• Strong troubleshooting, analytical, and stakeholder-management skills.

Registration No.: R25156061

EA No.: 11C3373