TC-CS-Data Protection and Privacy-PKI-Senior Professional

Position Title

PKI Engineer

The Opportunity

Your Key Responsibilities

• Perform end to end discovery of SSH keys, SSL/TLS certificates, and cryptographic assets across hybrid environments.
• Analyze key and certificate usage patterns, identify security gaps, and recommend remediation strategies.
• Support secure lifecycle management practices for SSH keys and SSL/TLS certificates, including rotation, revocation, and access controls.
• Conduct cryptographic discovery within applications, services, and infrastructure to identify cryptographic primitives and algorithms in use.
• Assess cryptographic posture and readiness of systems and applications against emerging quantum computing threats.
• Collaborate with architecture and engineering teams to evaluate and implement quantum safe cryptographic solutions.
• Contribute to the development of security documentation, standards, and operational procedures.

Skills and attributes for success

• Minimum 3-5 years of experience in Cybersecurity, preferably in cryptography, PKI, or certificate lifecycle management.
• Hands on experience with platforms such as Venafi, AppViewX, Thales, Sectigo, MSFT AD CS, or similar.
• Experience in discovery, assessment, and management of enterprise cryptographic assets.
• Familiarity with Post-Quantum Cryptography (PQC), including an understanding of quantum-resistant cryptographic algorithms, emerging standards, migration considerations, and their impact on enterprise PKI and security architectures.
• Strong understanding of cryptographic principles, PKI, SSL/TLS, SSH, and trust models.
• Familiarity with Linux/Unix/Windows administration, scripting (Python, Bash, PowerShell), and automation.
• Exposure to cloud platforms (AWS, Azure, GCP) and native key/certificate services.
• Strong communication, analytical, and collaboration skills.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.