Public Key Infrastructure And Cryptographic Specialist

Sasso Consulting; Johannesburg; Hybrid; ZAR 900.000 - 1.200.000; Vollzeit

Zusammenfassung

Sasso Consulting is seeking PKI and cryptographic specialists to design, implement, secure and maintain enterprise PKI and cryptographic infrastructures in a hybrid Johannesburg-area environment.

Successful candidates will manage digital certificates, encryption technologies, cryptographic keys, CAs, and security infrastructure to ensure confidentiality, integrity and authenticity of systems and communications, with hands-on PKI architecture and HSM experience.

Qualifikationen

• Experience designing and implementing enterprise PKI environments.
• Strong hands-on expertise in PKI architecture and certificate lifecycle management.
• Experience with HSMs and cryptographic security integration.

Aufgaben

• Design, implement, configure and maintain enterprise Public Key Infrastructure environments.
• Install, configure and administer Certificate Authorities (CAs), including root and subordinate CAs.
• Manage certificate issuance, renewal, revocation, expiration and lifecycle processes.
• Implement and maintain certificate templates, certificate policies and certificate enrolment procedures.
• Configure and manage Microsoft AD CS or equivalent PKI platforms.
• Maintain CRLs and OCSP services.
• Monitor PKI infrastructure availability, performance and security.
• Troubleshoot certificate validation, trust chain, authentication and encryption issues.
• Support PKI upgrades, migrations, integrations and infrastructure modernisation projects.
• Maintain accurate certificate inventories and PKI configuration documentation.

Kenntnisse

PKI architecture

HSMs

Certificate lifecycle management

Cryptographic protocols

Active Directory Certificate Services

Certificate Authorities

Tools

AD CS

Jobbeschreibung

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

Job Overview

We are seeking experienced and technically proficient Public Key Infrastructure (PKI) and Cryptographic Specialists to design, implement, administer, secure and maintain enterprise Public Key Infrastructure and cryptographic security solutions.

The successful candidates will be responsible for managing digital certificates, encryption technologies, cryptographic keys, certificate authorities and associated security infrastructure to ensure the confidentiality, integrity and authenticity of organisational systems, applications and communications.

This role requires strong hands‑on expertise in PKI architecture, certificate lifecycle management, cryptographic protocols, Hardware Security Modules (HSMs), encryption technologies and enterprise security integration.

The ideal candidates will have proven experience implementing and supporting PKI and cryptographic solutions within complex enterprise IT environments, with a strong understanding of information security, identity management and regulatory compliance.

Key Responsibilities

Public Key Infrastructure Management

• Design, implement, configure and maintain enterprise Public Key Infrastructure environments.
• Install, configure and administer Certificate Authorities (CAs), including root and subordinate CAs.
• Manage certificate issuance, renewal, revocation, expiration and lifecycle processes.
• Implement and maintain certificate templates, certificate policies and certificate enrolment procedures.
• Configure and manage Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Maintain Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP) services.
• Monitor PKI infrastructure availability, performance and security.
• Troubleshoot certificate validation, trust chain, authentication and encryption issues.
• Support PKI upgrades, migrations, integrations and infrastructure modernisation projects.
• Maintain accurate certificate inventories and PKI configuration documentation.

Cryptographic Key Management and Security

• Implement and manage cryptographic key generation, storage, distribution, rotation, revocation and destruction processes.
• Configure and maintain