Senior PKI & Key Management Architect (HSM & CLM)

NTT SINGAPORE PTE. LTD.; Singapore; On-site; SGD 100,000 - 140,000; Full time

Job summary

NTT SINGAPORE PTE. LTD. is seeking a System Security Engineer in Central Singapore for a 12-month contract with renewal prospects.

The role focuses on enterprise PKI design, certificate lifecycle management, key management, and HSM security solutions, not SOC operations. Strong hands-on PKI experience and familiarity with CLM platforms are essential. The specialist cryptography/security engineering position requires collaboration with security architects, application owners and vendors, plus

Qualifications

• Degree in Computer Science, Information Technology, Cybersecurity or related discipline.
• Minimum 5 years of IT/security experience, including at least 2 years hands-on PKI, Certificate Management, HSM or Enterprise Key Management experience.
• Strong experience designing and implementing enterprise certificate and key-management solutions.
• Strong knowledge of X.509, TLS/mTLS, CA hierarchy, certificate issuance/renewal/revocation and PKI architecture.
• Hands-on experience with CLM platforms such as CyberArk Venafi / Keyfactor / Entrust / AppViewX or similar.
• Hands-on experience with Entrust nShield / Thales CipherTrust / Thales Luna / AWS CloudHSM or similar HSM/KMS technologies.
• Knowledge of AWS KMS, ACM, Secrets Manager and CloudHSM is highly desirable.
• Experience with Python, PowerShell, Bash and/or REST APIs for automation is advantageous.
• Knowledge of FIPS, NIST, PKCS, crypto-agility and PQC is advantageous.
• Strong stakeholder and vendor management skills.
• Experience within banking/financial services or other highly regulated enterprise environments is preferred.

Responsibilities

• Design, implement and operationalise enterprise PKI, Certificate Lifecycle Management and Key Management solutions.
• Design and manage CA hierarchies, including Root and Subordinate CAs.
• Implement certificate lifecycle processes covering discovery, issuance, enrolment, renewal, revocation and expiry management.
• Design and integrate CLM platforms with enterprise Certificate Authorities.
• Design, deploy and integrate HSM and enterprise Key Management solutions.
• Support HSM operations including key generation, rotation, key ceremonies and secure key protection.
• Integrate certificate and key-management platforms with enterprise applications and security systems using REST APIs and automation.
• Design and support cloud cryptographic solutions using AWS KMS, ACM, Secrets Manager and CloudHSM.
• Support cryptographic asset discovery and maintain certificate/key inventories or CBOM.
• Apply cryptographic standards and best practices including X.509, PKCS, FIPS and NIST.
• Support cryptographic modernization and PQC/crypto-agility initiatives.
• Work closely with security architects, application owners, infrastructure teams and vendors.
• Troubleshoot complex PKI, certificate, HSM and key-management issues.

Skills

PKI design

Certificate Management

HSM management

Cloud HSM

Cryptography standards

Automation (Python/PowerShell)

REST APIs

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

CyberArk Venafi

Keyfactor

Entrust

AppViewX

Entrust nShield

Thales CipherTrust

Thales Luna

AWS CloudHSM

AWS KMS

Job description

NTT SINGAPORE PTE. LTD. is seeking a System Security Engineer in Central Singapore for a 12-month contract with renewal prospects.

The role focuses on enterprise PKI design, certificate lifecycle management, key management, and HSM security solutions, not SOC operations. Strong hands-on PKI experience and familiarity with CLM platforms are essential. The specialist cryptography/security engineering position requires collaboration with security architects, application owners and vendors, plus