System Security Engineer

Exasoft Pte. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Exasoft Pte. Ltd. in Singapore seeks an experienced security professional to lead cryptography, PKI, CLM and EKMS initiatives.

You will coordinate delivery with security architects, PKI operators, application teams, and vendors, and assess requirements across on-prem and AWS environments. You will design, implement, and operate CLM/EKMS platforms, manage certificate lifecycles, and monitor incidents related to PKI, HSMs, and cryptographic keys while aligning with FIPS/NIST standards and

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years IT or cybersecurity experience, including at least 2 years hands-on PKI, CLM, or Enterprise Key Management.
• Strong understanding of cryptography, PKI, X.509 certificates, TLS/mTLS, PKCS standards, CA, and key management.
• Hands-on experience with CLM platforms such as CyberArk Venafi, Keyfactor, Entrust, or similar technologies.
• Experience with Enterprise Key Management Systems and HSMs such as Entrust nShield, Thales CipherTrust, AWS KMS, or AWS CloudHSM.

Responsibilities

• Coordinate the delivery and implementation of Cryptography, PKI, Certificate Lifecycle Management (CLM), and Enterprise Key Management System (EKMS) solutions.
• Work closely with Security Architects, PKI/CA operators, application teams, platform owners, implementation partners, and vendors.
• Conduct requirement workshops and assess certificate and key management requirements across on-premises and AWS cloud environments.
• Support the design, implementation, and operationalization of CLM and EKMS platforms.
• Manage certificate lifecycle activities including discovery, issuance, enrollment, renewal, revocation, rotation, and expiry monitoring.
• Support enterprise key management processes and Hardware Security Module (HSM) operations.
• Apply cryptographic standards and best practices including FIPS, NIST, X.509, TLS/mTLS, and PKCS.
• Monitor, troubleshoot, and resolve incidents related to certificates, cryptographic keys, PKI infrastructure, and HSMs.
• Automate certificate and key management processes using Python, PowerShell, Bash, and REST APIs.
• Integrate cryptographic platforms with enterprise tools such as ITSM, IAM/SSO, SIEM, and monitoring platforms.
• Coordinate with technology vendors and implementation partners for support, delivery, and knowledge transfer.
• Support cryptographic asset discovery, CBOM development, and PQC transition initiatives.

Skills

PKI experience

Cryptography knowledge

TLS/mTLS

REST APIs

Python automation

Scripting Bash/PowerShell

AWS cloud security

HSMs

CLM tools

Agile/SDLC

Education

Bachelor's degree

Tools

CyberArk Venafi

Keyfactor

Entrust

AWS KMS

AWS CloudHSM

ServiceNow

PingOne

Splunk

Datadog

Nessus

Job description

Responsibilities

• Coordinate the delivery and implementation of Cryptography, PKI, Certificate Lifecycle Management (CLM), and Enterprise Key Management System (EKMS) solutions.
• Work closely with Security Architects, PKI/CA operators, application teams, platform owners, implementation partners, and vendors.
• Conduct requirement workshops and assess certificate and key management requirements across on-premises and AWS cloud environments.
• Support the design, implementation, and operationalization of CLM and EKMS platforms.
• Manage certificate lifecycle activities including discovery, issuance, enrollment, renewal, revocation, rotation, and expiry monitoring.
• Support enterprise key management processes and Hardware Security Module (HSM) operations.
• Apply cryptographic standards and best practices including FIPS, NIST, X.509, TLS/mTLS, and PKCS.
• Monitor, troubleshoot, and resolve incidents related to certificates, cryptographic keys, PKI infrastructure, and HSMs.
• Automate certificate and key management processes using Python, PowerShell, Bash, and REST APIs.
• Integrate cryptographic platforms with enterprise tools such as ITSM, IAM/SSO, SIEM, and monitoring platforms.
• Coordinate with technology vendors and implementation partners for support, delivery, and knowledge transfer.
• Support cryptographic asset discovery, CBOM development, and Post-Quantum Cryptography (PQC) transition initiatives.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years of IT or cybersecurity experience, including at least 2 years of hands‑on experience in PKI, CLM, or Enterprise Key Management.
• Strong understanding of cryptography, PKI, X.509 certificates, TLS/mTLS, PKCS standards, Certificate Authorities, and key management.
• Hands‑on experience with CLM platforms such as CyberArk Venafi, Keyfactor, Entrust, or similar technologies.
• Experience with Enterprise Key Management Systems and HSMs such as Entrust nShield, Thales CipherTrust, AWS KMS, or AWS CloudHSM.
• Experience integrating security platforms using REST APIs with tools such as ServiceNow, PingOne, Splunk, Datadog, or Nessus.
• Proficiency in automation and ing using Python, PowerShell, and/or Bash.
• Knowledge of AWS cloud security and cryptographic services is preferred.
• Familiarity with Agile/SDLC methodologies such as Scrum and Kanban.
• Exposure to Post-Quantum Cryptography (PQC), cryptographic discovery, or CBOM is an advantage.
• Strong analytical, troubleshooting, stakeholder management, and communication skills.
• Experience in banking, financial services, or other regulated environments is preferred.