Senior PKI Engineer - Lifecycle & Automation

ICON OUTSOURCING; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ICON OUTSOURCING is seeking an experienced PKI Engineer to design, implement, administer, and support the organization’s PKI environment, ensuring secure certificate lifecycle management and CA governance. You will automate certificate operations and integrate PKI with enterprise applications and security platforms.

The role requires leadership across PKI CLM, HSMs, and cryptographic standards, with collaboration across security, infrastructure, and vendor teams, and a focus on TLS 1.3 adoption

Qualifications

• Deep knowledge of PKI, X.509, CA, CRL, TLS/SSL, and OCSP.
• Experience with PKI platforms (e.g., Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi).
• Understanding of HSMs, audit controls, RBAC and security compliance.

Responsibilities

• Design, implement, administer, and support the PKI environment and CA operations.
• Manage certificate lifecycle, issuance, renewal, revocation, and inventory.
• Automate certificate operations and integrate PKI with enterprise apps and security platforms.

Skills

PKI

X.509 Certificates

CA administration

TLS/SSL

HSMs

PowerShell

Python

RBAC

Audit/compliance

PKI platforms

TLS 1.3

Cryptographic algorithms

Job description

ICON OUTSOURCING is seeking an experienced PKI Engineer to design, implement, administer, and support the organization’s PKI environment, ensuring secure certificate lifecycle management and CA governance. You will automate certificate operations and integrate PKI with enterprise applications and security platforms.

The role requires leadership across PKI CLM, HSMs, and cryptographic standards, with collaboration across security, infrastructure, and vendor teams, and a focus on TLS 1.3 adoption