System Engineer

Responsibilities :

• Manage all types of cryptographic keys and certificates across enterprise systems.

- Cryptographic Keys

Symmetric Keys

Asymmetric Keys (Public/Private Key Pairs)

- Secrets

API Keys and Access Tokens

Application Secrets

- Certificates

SSL/TLS Certificates for web servers

Clients Certificates for mutual TLS authentication

Includes certificate management along with its private key.

• Work with HSMs (Hardware Security Modules), KMS (Key Management Systems), and cloud-native tools, (e.g., AWS KMS, Azure Key Vault)

• Develop and manage enterprise PKI systems and certificate lifecycle

• Support internal teams with certificate installation and troubleshooting

• Design and Deploy scalable key certificate management infrastructure.

• Integrate key certificate management solutions with enterprise applications and platforms.

• Automate key certificate rotation and renewal processes

• Assist developers and DevOps teams with secure key usage.

• Provide subject matter expertise in cryptocurrency, including symmetric/asymmetric encryption.

• Maintain inventory of key certificate and related assets.

Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or related field.

• 3+ years experience in IT Security, preferably with a focus on encryption and key management.

• Knowledge of PKI, TLS/SSL, and secure key storage.

• Familiarity with tools like AWS KMS, Thales HSM, or HashiCorp Vault.

• Strong knowledge of SSL/TLS, PKI and X.509 certificates.

• Experience with HSMs, KMIP protocol, and key management best practices.

• Basic understanding of digital certificates and encryption.

• Understanding of multi-cloud encryption practices.

• Knowledge of Quantum-safe cryptography trends (for forward-looking orgs)

• Experience with certificate automation tools and cloud platforms (AWS ACM, Azure Key Vault)