Pki & Cryptography Security Engineer (Certificate Lifecycle Management)_ Contract

Employment Type: 12-month renewable contract Location: Central Singapore Work Arrangement: Onsite We are hiring a PKI & Cryptography Security Engineer (Certificate Lifecycle Management) to join a large-scale enterprise technology environment. This is a 12-month renewable contract based in Central Singapore , offering the opportunity to work on enterprise PKI, Certificate Lifecycle Management (CLM), Enterprise Key Management (EKMS), and cryptography solutions supporting mission-critical systems. The successful candidate will work closely with security architects, platform engineers, vendors, and application teams to implement secure certificate and key management solutions across on-premises and cloud environments. Key Responsibilities Implement and support enterprise Certificate Lifecycle Management (CLM) solutions. Design and operate enterprise PKI and key management platforms. Manage certificate issuance, renewal, revocation, discovery, and lifecycle automation. Configure and support Hardware Security Modules (HSM) and enterprise key management solutions. Support cryptographic standards including X.509, TLS/mTLS, PKCS and Certificate Authorities. Integrate security platforms with enterprise systems using REST APIs. Automate operational activities using Python, PowerShell or Bash. Support incident response, troubleshooting and operational improvements. Work closely with infrastructure, cloud, security architects and application teams. Participate in SDLC and Agile delivery activities. Requirements Degree in Computer Science, Information Technology or equivalent. At least 5 years' experience in Information Security or Cyber Security. Minimum 2 years' hands-on experience in PKI, Certificate Lifecycle Management or Enterprise Key Management. Hands-on experience with one or more CLM platforms such as Venafi, Keyfactor, CyberArk or Entrust. Experience with HSM technologies such as Entrust nShield, Thales CipherTrust, AWS KMS or CloudHSM. Good understanding of cryptography, PKI, certificate authorities, X.509, TLS/mTLS and PKCS. Experience integrating security platforms using REST APIs. Experience with Python, PowerShell or Bash scripting. Experience within banking or large enterprise environments will be an advantage. Interested candidates are kindly requested to email their CV with their experience to sandeep.sringeripai@global.ntt We look forward to your application!