Public Key Infrastructure Specialist

Role Overview

As a Public Key Infrastructure (PKI) Specialist, you will lead the design, deployment, management, and support of the organization's PKI ecosystem. Your responsibilities include overseeing certificate lifecycle management, Certificate Authority (CA) operations, cryptographic compliance, and automation of certificate processes, while integrating PKI solutions with enterprise applications and security frameworks.

Key Responsibilities

• Administer and maintain the enterprise PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and certificate management platforms.
• Handle comprehensive certificate lifecycle processes such as issuance, renewal, revocation, replacement, and expiry monitoring.
• Deploy and manage SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network equipment.
• Implement certificate discovery mechanisms, maintain inventory tracking, and generate compliance reports.
• Manage cryptographic keys and Hardware Security Modules (HSMs), ensuring adherence to security standards.
• Create and maintain automation scripts, APIs, and workflows to streamline certificate provisioning and renewal.
• Support seamless PKI integration with monitoring, IT Service Management (ITSM), vulnerability management, and secrets management systems.
• Troubleshoot issues related to certificates, authentication, encryption, and trust chains.
• Develop and uphold PKI operational procedures, standards, and audit documentation.
• Collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI-related projects.
• Drive modernization efforts including adoption of TLS 1.3, certificate governance enhancement, and readiness for Post-Quantum Cryptography (PQC).

Required Experience and Expertise

• Over 10 years of experience in PKI, cybersecurity, or infrastructure security, preferably within banking or financial services sectors.
• Proficient with certificate lifecycle management platforms and automation solutions.
• Strong understanding of PKI concepts: X.509 certificates, Certificate Authorities, Certificate Revocation Lists (CRLs), TLS/SSL protocols, and Online Certificate Status Protocol (OCSP).
• Hands-on experience with PKI platforms such as Microsoft Active Directory Certificate Services (ADCS), DigiCert, Entrust, Keyfactor, Venafi, or AppViewX.
• Familiarity with cryptographic algorithms and standards including RSA, ECC, AES-256, SHA-2/SHA-3, and TLS versions 1.2 and 1.3.
• Experience operating on both Windows and Linux systems.
• Strong scripting capabilities in PowerShell, Python, and Shell scripting.
• Knowledge of Hardware Security Modules (HSMs), Role-Based Access Control (RBAC), audit controls, and compliance protocols.
• Expertise integrating PKI with enterprise software, middleware, and database environments.

Work Approach

• Exhibit outstanding problem-solving and troubleshooting abilities.
• Work collaboratively across application, infrastructure, and cybersecurity teams.
• Maintain thorough documentation and uphold governance standards.
• Proactively contribute to modernization and security readiness initiatives.

Preferred Qualifications

• Certifications such as CISSP, CISM, Security+, or specialized PKI credentials are desirable.
• Additional infosec or PKI focused certifications are advantageous.

About Thakral One

Thakral One is a Singapore-headquartered consulting and technology services provider with a strong presence across Asia. Our core focus lies in technology-driven consulting, delivering tailored value-added solutions, enhancing decision-making through data analytics, and leveraging cloud capabilities. We prioritize collaborative capability building with clients to achieve effective, practical outcomes. Our partnerships with top global technology vendors and in-house R&D enable us to serve clients across sectors including Financial Services, Banking, Telecommunications, Government, Healthcare, and Consumer industries.