Senior PKI Engineer - Certificate Lifecycle & Automation

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NTT SINGAPORE PTE. LTD. seeks an experienced PKI Engineer to design, implement, administer, and support the organization’s PKI environment.

The role covers certificate lifecycle management, CA administration, cryptographic compliance, automation, and integration with enterprise applications and security platforms. Responsibilities include managing CA/RA, SSL/TLS deployments, and PKI integrations with monitoring, ITSM, and vulnerability management tools, ensuring secure digital certificates

Qualifications

• Experience with enterprise PKI environments and CA management.
• Design, implement, and govern certificate lifecycle management.
• Ability to automate certificate provisioning and renewal.

Responsibilities

• Manage enterprise PKI infrastructure, including CA/RA.
• Administer end-to-end certificate lifecycle across systems.
• Deploy SSL/TLS certificates to servers and apps.
• Implement certificate discovery and compliance reporting.
• Manage cryptographic keys and HSMs.
• Develop automation scripts and workflows.
• Support PKI integrations with enterprise tools.
• Troubleshoot PKI, trust chains, and encryption issues.
• Maintain PKI procedures and audit docs.
• Collaborate with cross-functional teams on PKI projects.
• Support TLS 1.3 adoption and PQC readiness.

Skills

PKI

TLS/SSL

ADCS

PowerShell

Python

Windows

Linux

Automation

RBAC

Audit controls

Certificate lifecycle

HSMs

Tools

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

NTT SINGAPORE PTE. LTD. seeks an experienced PKI Engineer to design, implement, administer, and support the organization’s PKI environment.

The role covers certificate lifecycle management, CA administration, cryptographic compliance, automation, and integration with enterprise applications and security platforms. Responsibilities include managing CA/RA, SSL/TLS deployments, and PKI integrations with monitoring, ITSM, and vulnerability management tools, ensuring secure digital certificates