Senior PKI Engineer: Crypto, TLS & Automation

Thakral One; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Thakral One is seeking a Public Key Infrastructure Specialist to design, implement, operate, and support the organisation's PKI environment across diverse platforms. You will manage CA/RA, certificate lifecycles, and cryptographic controls while coordinating with security, infra, and application teams.

You will automate certificate provisioning, support TLS adoption, and ensure compliance with governance and audit requirements. Strong scripting and cross-platform experience are essential.

Qualifications

• 10+ years of PKI, cybersecurity, or infrastructure security experience.
• Experience in banking or financial services environments.
• Experience with certificate lifecycle management (CLM) platforms and automation solutions.

Responsibilities

• Design, implement, administer, and support enterprise PKI environment including CA/RA and certificate management platforms.
• Manage end-to-end certificate lifecycle: issuance, renewal, revocation, replacement, expiry tracking.
• Deploy and support SSL/TLS certificates across servers, middleware, DBs, apps, APIs, and network devices.
• Develop automation scripts, APIs, and workflows for certificate provisioning and renewal.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues; maintain governance and audit docs.

Skills

PKI

X.509 Certificates

TLS/SSL

CA/CRL management

Scripting (PowerShell/Python)

Windows & Linux

HSMs

RBAC & Audit controls

PKI integration

Education

CISSP

CISM

Security+

Tools

Microsoft ADCS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

Thakral One is seeking a Public Key Infrastructure Specialist to design, implement, operate, and support the organisation's PKI environment across diverse platforms. You will manage CA/RA, certificate lifecycles, and cryptographic controls while coordinating with security, infra, and application teams.

You will automate certificate provisioning, support TLS adoption, and ensure compliance with governance and audit requirements. Strong scripting and cross-platform experience are essential.