System Security Application Engineer

TEKsystems Global Services, LLC; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

TEKsystems Global Services, LLC is seeking an experienced Application Engineer in Singapore to implement and manage Enterprise Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) platforms. You will collaborate with Security Architects, application teams, and vendors to deliver secure certificate and cryptographic key management across enterprise environments.

PQC initiatives and modernization efforts are part of the remit.

Qualifications

• Degree in Computer Science, Information Technology, Cyber Security, or related field.
• Minimum 5 years of IT experience in PKI, Certificate Lifecycle Management, or Enterprise Key Management.
• Strong understanding of cryptography, PKI, X.509 certificates, TLS/mTLS, and key management concepts.
• Experience with CLM solutions such as CyberArk/Venafi/Keyfactor/Entrust.
• Experience with HSMs and key management platforms (Entrust nShield, Thales CipherTrust, AWS KMS, CloudHSM).
• Experience with scripting and automation using Python, PowerShell, or Bash.
• Strong analytical, troubleshooting, and stakeholder management skills.

Responsibilities

• Implement and support CLM and EKMS solutions.
• Partner with security architects, vendors, and application teams to design and operationalize certificate and key management processes.
• Manage certificate issuance, renewal, revocation, discovery, and key lifecycle operations.
• Monitor and resolve PKI, cryptographic keys, and HSM-related issues.
• Drive process improvements, automation, and operational excellence.
• Support PQC readiness initiatives and cryptographic modernization efforts.

Skills

PKI knowledge

Certificate Lifecycle Mgmt

Cryptography concepts

X.509 certificates

TLS/mTLS

Key management

Python

PowerShell

Bash

Stakeholder management

Education

Bachelor’s degree in CS/IT/Cyber Security

Tools

CyberArk

Venafi

Keyfactor

Entrust

Entrust nShield

Thales CipherTrust

AWS KMS

CloudHSM

Job description

• Implement and support Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) solutions.
• Partner with security architects, vendors, and application teams to design and operationalize certificate and key management proce
• Manage certificate issuance, renewal, revocation, discovery, and key lifecycle operations.

We are seeking an experienced Application Engineer to support the implementation and management of Enterprise Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) platforms.

You will work closely with Security Architects, application teams, and vendors to deliver secure certificate and cryptographic key management solutions across enterprise environments. This role will also support the organization's Post-Quantum Cryptography (PQC) initiatives and cryptographic modernization efforts.

Key Responsibilities

• Implement and support Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) solutions.
• Partner with security architects, vendors, and application teams to design and operationalize certificate and key management processes.
• Manage certificate issuance, renewal, revocation, discovery, and key lifecycle operations.
• Monitor and resolve issues related to PKI, cryptographic keys, and Hardware Security Modules (HSMs).
• Drive process improvements, automation, and operational excellence.
• Support cryptographic asset discovery and PQC readiness initiatives.

Requirements

• Degree in Computer Science, Information Technology, Cyber Security, or a related field.
• Minimum 5 years of IT experience, including hands-on experience in PKI, Certificate Lifecycle Management, or Enterprise Key Management.
• Strong understanding of cryptography, PKI, X.509 certificates, TLS/mTLS, and key management concepts.
• Experience with CLM solutions such as CyberArk/Venafi, Keyfactor, or Entrust.
• Experience with HSMs and key management platforms such as Entrust nShield, Thales CipherTrust, AWS KMS, or CloudHSM.
• Experience with scripting and automation using Python, PowerShell, or Bash.
• Strong analytical, troubleshooting, and stakeholder management skills.

Preferred

• Experience within banking or financial services environments.
• Exposure to Post-Quantum Cryptography (PQC) initiatives.
• Familiarity with AWS cloud security and cryptographic services.

We regret to inform that only shortlisted candidates will be notified.

EA Registration No: JEWEL TEN JING HUI , R26159738

Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA License No. 10C4544