System Security Engineer

We are in search of a skilled Application Engineer to assist in the deployment and administration of Enterprise Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) platforms.

This position involves close collaboration with Security Architects, application teams, and external vendors to provide secure management solutions for certificates and cryptographic keys throughout enterprise environments. Additionally, this role will contribute to the organization's Post-Quantum Cryptography (PQC) initiatives and efforts toward cryptographic modernization.

Key Responsibilities

• Deploy and maintain Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) solutions.
• Collaborate with security architects, vendors, and application teams to design and operationalize processes for certificate and key management.
• Oversee the processes of certificate issuance, renewal, revocation, discovery, and key lifecycle management.
• Identify and resolve issues related to PKI, cryptographic keys, and Hardware Security Modules (HSMs).
• Promote process enhancements, automation, and operational efficiency.
• Assist with cryptographic asset discovery and readiness initiatives for PQC.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related discipline.
• At least 5 years of experience in IT, with hands-on involvement in PKI, Certificate Lifecycle Management, or Enterprise Key Management.
• In-depth knowledge of cryptography, PKI, X.509 certificates, TLS/mTLS, and key management principles.
• Familiarity with CLM solutions such as CyberArk/Venafi, Keyfactor, or Entrust.
• Experience with HSMs and key management platforms like Entrust nShield, Thales CipherTrust, AWS KMS, or CloudHSM.
• Proficient in scripting and automation with Python, PowerShell, or Bash.
• Exceptional analytical, troubleshooting, and stakeholder management capabilities.

Preferred

• Experience working in banking or financial services sectors.
• Knowledge of Post-Quantum Cryptography (PQC) initiatives.
• Understanding of AWS cloud security and cryptographic services.

We regret to inform that only candidates selected for further consideration will be contacted.

EA Registration No: JEWEL TEN JING HUI , R26159738

Allegis Group Singapore Pte Ltd, Company Reg No. 200909448N, EA License No. 10C4544