Security Engineer (Contract)

• Manage PKI, CA, SSL/TLS and X.509 Certificate Lifecycle, including issuance, renewal, installation, validation, and revocation.

• Manage and protect cryptographic keys and support Digital Signature, OCSP, and CRL services.

• Support Key & Secret Management solutions such as AWS KMS, Azure Key Vault, HashiCorp Vault, Thales HSM, or SafeNet HSM.

• Implement security controls for AWS/Azure, including Cloud Encryption, CMK, and BYOK.

• Develop scripts and automation using Python, PowerShell, or Bash for certificate and key management.

• Collaborate with Infrastructure, Cybersecurity, and DevSecOps teams to maintain secure enterprise environments.

Qualifications / Must Have

• Bachelor's degree in Computer Science, IT, Computer Engineering, Cybersecurity, or related fields.

• Hands-on experience in PKI, Certificate Management, SSL/TLS, X.509, and CA.

• Understanding of Cryptography, including AES, RSA, ECC, Public/Private Key, Digital Signature, Hashing, and Key Lifecycle.

• Experience with at least one KMS / HSM / Secret Management solution.

• Experience with AWS or Azure and cloud encryption.

• Experience with Python, PowerShell, or Bash scripting.

Nice to Have

• HSM Implementation / KMIP

• Multi-Cloud Security

• Kubernetes Secret Management

• DevSecOps / CI-CD

• Quantum-safe Cryptography

• CyberArk / Enterprise Secret Management