PKI & Cryptographic Services Engineer

DataTech Recruitment; Johannesburg; On-site; ZAR 603,000 - 737,000; Full time

Job summary

DataTech Recruitment seeks a PKI & Cryptographic Services Engineer for a permanent, on-site role in Sandton, Johannesburg. The engineer will support PKI, cryptographic services and digital trust, working across Windows and Linux, AD/LDAP, databases and HSMs. The role emphasizes hands-on systems and security across diverse environments.

The candidate will manage certificate lifecycles, troubleshoot across platforms, and collaborate with vendors and customers to maintain secure digital services.

Qualifications

• IT degree, diploma or relevant technical certification.
• 2 to 5 years of relevant technical experience in infrastructure, systems administration or PKI.
• Strong hands-on experience with Windows Server and Linux administration.
• Good networking knowledge: TCP/IP, routing, switching, ports, firewalls and OSI model.
• Experience with certificate-enabled technologies such as SSL/TLS, S/MIME or Code Signing.
• Exposure to PKI and certificate management concepts; certificate lifecycle management.

Responsibilities

• Support and maintain PKI, Digital Trust and cryptographic services across production environments.
• Investigate and resolve issues spanning applications, OS, networks, databases and directory services.
• Manage certificate lifecycle activities including issuance, renewal, revocation, discovery and trust chains.
• Configure, monitor and troubleshoot Windows and Linux servers and supporting services.
• Work with CA and certificate management platforms (Entrust, EJBCA, Venafi).
• Support HSMs, including Thales Luna and nCipher/Entrust environments.
• Troubleshoot Active Directory, LDAP and authentication issues affecting PKI platforms.
• Monitor production logs, alerts and platform health, escalate issues before service impact.
• Troubleshoot SSL/TLS, certificate bindings, and certificate-enabled apps.
• Diagnose networking issues across routing, ports, firewalls and infrastructure.
• Assist with high availability, clustering and replication environments.
• Manage incidents, service requests and changes via Service Desk.
• Collaborate with customers, internal engineering teams and vendors to resolve problems.

Education

IT degree or diploma or relevant technical certification

Tools

Entrust CA

EJBCA

Entrust CLM/EAS

Venafi

Thales Luna HSM

nCipher

Windows Server

Oracle

RHEL Linux

OpenLDAP

Active Directory

PostgreSQL

MSSQL

IIS

Apache

OpenSSL

Splunk

REST APIs

PowerShell

Job description

PKI & Cryptographic Services Engineer requiredin Johannesburg.

We are currently hiring a PKI & Cryptographic Services Engineer for a permanent, onsite role in Sandton, Johannesburg.

This is a hands-on engineering opportunity for someone who enjoys solving complex infrastructure and security problems and wants to build deeper expertise in Public Key Infrastructure (PKI), cryptographic services and digital trust.

Our client operates within the information security space, supporting business-critical PKI and Digital Trust services. You’ll join the Technology Operations team, taking responsibility for the day-to-day support, maintenance, monitoring and troubleshooting of cryptographic services and the infrastructure that supports them.

The environment is technically broad. You’ll work across PKI and certificate management, Windows and Linux, networking, Active Directory and LDAP, databases, HSMs and security infrastructure. This would suit an engineer who is already strong across systems and infrastructure and wants to develop further into PKI and cryptographic technologies. ASEC_Specialist_Cryptographic S… Crypto_PKI_Skills Required

Tech: Entrust CA, EJBCA, Entrust CLM/EAS, Venafi, Thales Luna HSM, nCipher/Entrust HSM, Windows Server, Oracle/RHEL Linux, OpenLDAP, AD LDS, Active Directory, PostgreSQL, MSSQL, IIS, Apache, OpenSSL, Splunk, REST APIs and PowerShell. Crypto_PKI_Skills Required

Salary: R60,000 per month.

Duties and Responsibilities:

• Support and maintain PKI, Digital Trust and cryptographic services across production environments.
• Investigate and resolve technical issues spanning applications, operating systems, networks, databases and directory services.
• Manage certificate lifecycle activities including issuance, renewal, revocation, discovery, certificate profiles and trust chains.
• Configure, monitor and troubleshoot Windows and Linux servers and supporting services.
• Work with CA and certificate management platforms including Entrust, EJBCA and Venafi.
• Support Hardware Security Modules, including Thales Luna and nCipher/Entrust environments.
• Troubleshoot Active Directory, LDAP and authentication issues affecting PKI platforms.
• Monitor production systems, logs, alerts and platform health, identifying and escalating issues before they affect service availability.
• Troubleshoot SSL/TLS, certificate bindings and certificate-enabled applications.
• Diagnose networking and connectivity issues across routing, ports, firewalls and application infrastructure.
• Support PostgreSQL and MSSQL environments where they integrate with PKI services.
• Assist with high availability, clustering and replication environments.
• Manage incidents, service requests and changes through the Service Desk.
• Work directly with customers, internal engineering teams and technology vendors to resolve technical problems.
• Continue developing your knowledge across PKI, HSMs, certificate management and the wider cryptographic technology environment.

Requirements:

• IT degree, diploma or relevant technical certification.
• 2 to 5 Years of relevant technical experience, ideally across infrastructure, systems administration, information security or PKI.
• Strong hands-on experience with Windows Server and Linux administration.
• Good networking knowledge covering TCP/IP, routing, switching, ports, firewalls and the OSI model.
• Experience troubleshooting production systems using monitoring tools, application logs and system logs.
• Understanding of PKI and certificate management concepts.
• Experience with certificate-enabled technologies such as SSL/TLS, S/MIME or Code Signing.
• Experience with Active Directory and/or LDAP.
• Exposure to Entrust, EJBCA, Venafi, HSMs or certificate lifecycle management platforms would be highly valuable.
• PostgreSQL and/or MSSQL knowledge would be advantageous.
• REST API, PowerShell or scripting experience is beneficial.
• Exposure to IIS, Apache, clustering, replication, virtualisation or containerisation would be useful.
• Strong troubleshooting skills with the ability to work methodically across application, operating system, network and infrastructure layers.
• Clear communication skills and the ability to work effectively with customers and technical teams.
• A willingness to learn specialist technologies and take increasing ownership of complex environments.
• Certifications such as A+, N+, Security+ or CEH are advantageous.
• Own reliable transport.

Ready for your next technical challenge?

If you have a solid systems, infrastructure or security background and want to develop deeper expertise in PKI, cryptography, digital certificates and enterprise security platforms, this is an opportunity to work with technologies that sit at the heart of secure digital services.