Senior PKI Platform Engineer

What's On Offer: 1 Year Contract
Based in Singapore

We are seeking a Senior PKI Platform Engineer on behalf of our client to lead the deployment, integration, automation, and operational management of an enterprise certificate management platform. This role is ideal for someone with deep expertise in Public Key Infrastructure (PKI), TLS/SSL, enterprise certificate lifecycle management, and machine identities, combined with strong Linux, Kubernetes, automation, and cloud integration skills.

You will serve as the technical SME responsible for securing enterprise environments through scalable PKI operations, certificate automation, and platform engineering.

Key Responsibilities

• Manage the end-to-end PKI and certificate lifecycle (issuance, renewal, revocation, rotation, trust stores).
• Deploy, administer, and support Keyfactor or equivalent enterprise PKI platforms.
• Troubleshoot TLS/SSL, certificate chain, OCSP/CRL, and trust-related issues.
• Perform certificate discovery and machine identity management across enterprise environments.
• Automate certificate workflows using Python, PowerShell, Bash, Terraform, Ansible, Helm, and CI/CD tools.
• Integrate PKI solutions with AWS, Azure, Kubernetes, F5, NGINX, IIS, and REST APIs.
• Support Linux and Kubernetes platforms, including upgrades, patching, and operational troubleshooting.
• Build monitoring and dashboards using OpenSearch, ELK, or Splunk.
• Produce technical documentation, runbooks, and provide technical leadership.

Core Technical Skills (Essential)

• Public Key Infrastructure (PKI)
• Enterprise Certificate Lifecycle Management
• Certificate Authorities (CA)
• X.509 Certificates
• TLS / SSL
• Cryptography
• Keyfactor (preferred) or equivalent PKI platform
• Certificate Discovery
• Machine Identity Management

Infrastructure

• Linux
• Kubernetes
• Docker
• AWS and/or Azure

Automation

• Python
• PowerShell
• Bash
• Terraform
• Ansible
• Helm
• CI/CD (Azure DevOps, GitHub Actions, Jenkins)

Integration

• REST APIs
• Webhooks
• Cloud integrations
• F5
• NGINX
• IIS

Monitoring

• OpenSearch
• ELK
• Splunk

Please note that shortlisted candidates will be contacted.