PKI & Cryptographic Services Engineer

About the role

This hands‑on engineering position focuses on supporting and enhancing Public Key Infrastructure (PKI) and cryptographic services for a client in the information‑security sector. You will join the Technology Operations team, responsible for day‑to‑day maintenance, monitoring and troubleshooting of the platforms that underpin digital trust.

Key responsibilities

• Support and maintain PKI, digital‑trust and cryptographic services across production environments.
• Manage the full certificate lifecycle – issuance, renewal, revocation, discovery and trust‑chain configuration.
• Configure, monitor and troubleshoot Windows and Linux servers, networking, Active Directory/LDAP and related databases.
• Work with CA and certificate‑management platforms such as Entrust, EJBCA and Venafi.
• Support Hardware Security Modules (Thales Luna, nCipher) and resolve related authentication issues.
• Monitor system health via logs, alerts and Splunk, and escalate incidents before service impact.

Required profile

• IT degree, diploma or relevant technical certification (A+, N+, Security+ or CEH advantageous).
• 2–5 years of experience in systems administration, networking or information security.
• Strong hands‑on experience with Windows Server and Linux (RHEL/Oracle).
• Good understanding of PKI concepts, SSL/TLS, S/MIME or code‑signing.
• Effective communication skills and ability to work with customers and vendors.

Required skills

• Entrust CA, EJBCA, Venafi certificate‑management platforms.
• Thales Luna and nCipher Hardware Security Modules.
• Windows Server, Linux (RHEL/Oracle), Active Directory, AD LDS, OpenLDAP.
• PostgreSQL, MSSQL, IIS, Apache, OpenSSL, Splunk.
• REST APIs, PowerShell scripting, TCP/IP networking, routing, firewalls.