PKI & Cryptography Security Engineer (Certificate Lifecycle Management)_ Contract

• Employment Type: 12-month renewable contract

Location: Central Singapore Work Arrangement: Onsite We are hiring a PKI & Cryptography Security Engineer (Certificate Lifecycle Management) to join a large-scale enterprise technology environment. This is a 12-month renewable contract based in Central Singapore, offering the opportunity to work on enterprise PKI, Certificate Lifecycle Management (CLM), Enterprise Key Management (EKMS), and cryptography solutions supporting mission-critical systems.

The successful candidate will work closely with security architects, platform engineers, vendors, and application teams to implement secure certificate and key management solutions across on-premises and cloud environments. Key Responsibilities

• Implement and support enterprise Certificate Lifecycle Management (CLM) solutions.

• Design and operate enterprise PKI and key management platforms.

• Manage certificate issuance, renewal, revocation, discovery, and lifecycle automation.

• Configure and support Hardware Security Modules (HSM) and enterprise key management solutions.

• Support cryptographic standards including X.509, TLS/mTLS, PKCS and Certificate Authorities.

• Integrate security platforms with enterprise systems using REST APIs.

• Automate operational activities using Python, PowerShell or Bash.

• Support incident response, troubleshooting and operational improvements.

• Work closely with infrastructure, cloud, security architects and application teams.

• Participate in SDLC and Agile delivery activities.

Requirements

• Degree in Computer Science, Information Technology or equivalent.

• At least 5 years' experience in Information Security or Cyber Security.

• Minimum 2 years' hands-on experience in PKI, Certificate Lifecycle Management or Enterprise Key Management.

• Hands-on experience with one or more CLM platforms such as Venafi, Keyfactor, CyberArk or Entrust.

• Experience with HSM technologies such as Entrust nShield, Thales CipherTrust, AWS KMS or CloudHSM.

• Good understanding of cryptography, PKI, certificate authorities, X.509, TLS/mTLS and PKCS.

• Experience integrating security platforms using REST APIs.

• Experience with Python, PowerShell or Bash scripting.

• Experience within banking or large enterprise environments will be an advantage.

Interested candidates are kindly requested to email their CV with their experience to [email protected] We look forward to your application!