Senior PKI Platform Engineer

Job Description

Whats On Offer: 1 Year Contract
Based in Singapore

We are seeking a Senior PKI Platform Engineer on behalf of our client to lead the deployment integration automation and operational management of an enterprise certificate management platform. This role is ideal for someone with deep expertise in Public Key Infrastructure (PKI) TLS/SSL enterprise certificate lifecycle management and machine identities combined with strong Linux Kubernetes automation and cloud integration skills.

You will serve as the technical SME responsible for securing enterprise environments through scalable PKI operations certificate automation and platform engineering.

Key Responsibilities

• Manage the end-to-end PKI and certificate lifecycle (issuance renewal revocation rotation trust stores).
• Deploy administer and support Keyfactor or equivalent enterprise PKI platforms.
• Troubleshoot TLS/SSL certificate chain OCSP/CRL and trust-related issues.
• Perform certificate discovery and machine identity management across enterprise environments.
• Automate certificate workflows using Python PowerShell Bash Terraform Ansible Helm and CI/CD tools.
• Integrate PKI solutions with AWS Azure Kubernetes F5 NGINX IIS and REST APIs.
• Support Linux and Kubernetes platforms including upgrades patching and operational troubleshooting.
• Build monitoring and dashboards using OpenSearch ELK or Splunk.
• Produce technical documentation runbooks and provide technical leadership.

Core Technical Skills (Essential)

• Public Key Infrastructure (PKI)
• Enterprise Certificate Lifecycle Management
• Certificate Authorities (CA)
• X.509 Certificates
• TLS / SSL
• Cryptography
• Keyfactor (preferred) or equivalent PKI platform
• Certificate Discovery
• Machine Identity Management

Infrastructure

• Linux
• Kubernetes
• Docker
• AWS and/or Azure

Automation

• Python
• PowerShell
• Bash
• Terraform
• Ansible
• Helm
• CI/CD (Azure DevOps GitHub Actions Jenkins)

Integration

• REST APIs
• Webhooks
• Cloud integrations
• F5
• NGINX
• IIS

Monitoring

• OpenSearch
• ELK
• Splunk

Please note that shortlisted candidates will be contacted.