PKI Certificate Lifecycle Management Architect - Melbourne
- Design and implement enterprise PKI and certificate lifecycle management solutions.
- Support a multi-phase PKI improvement initiative focused on DigiCert One.
- Provide operational support for certificate management across the organisation.
Ayan Infotech are looking for a PKI Certificate Lifecycle Management Engineer/Architect for a long term contract job opportunity in Melbourne.
All applicants must have full unrestricted work rights in Australia.
Title: PKI Certificate Lifecycle Management Engineer/ Architect
Location: Melbourne
Type: Contract (6+ months)
Role Summary
The PKI Certificate Lifecycle Management (CLM) Engineer / Architect is responsible for the design, implementation, enablement, and ongoing operation of enterprise PKI and certificate lifecycle management solutions. This role will support a long-term, multi-phase PKI improvement initiative, focused on implementing and operationalising DigiCert One (SaaS) to improve certificate governance, automation, and compliance across the organisation.
The role will work closely with security, infrastructure, and application teams throughout phases of the program, while also providing BAU and operational support once the platform is live.
Required Skills & Experience
- Strong expertise in Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) concepts and operations.
- Hands-on experience with DigiCert One, including Trust Lifecycle Manager (TLM).
- Proven experience managing the full certificate lifecycle, including issuance, renewal, revocation, and expiration management.
- Solid understanding of X.509 certificates, TLS/SSL, key pairs, and cryptographic algorithms.
- Experience supporting enterprise-scale PKI environments across hybrid (on-prem and cloud) infrastructures.
- Familiarity with certificate discovery, automation, and governance frameworks.
- Strong troubleshooting skills for certificate?related issues impacting applications, endpoints, and infrastructure.
- Experience working with Windows and Linux operating systems in secure environments.
- Understanding of security controls, encryption standards, and compliance requirements related to PKI.
- Strong hands-on experience with Hardware Security Modules (HSMs) and enterprise key management solutions.
- Proven experience implementing and managing HSM-backed PKI environments for Root CA, Intermediate CA, and certificate lifecycle management platforms.
- Knowledge of HSM concepts including key generation, secure key storage, key backup/recovery, partition management, and cryptographic operations.
- Experience integrating PKI platforms such as DigiCert One, Microsoft ADCS, Entrust, or similar solutions with HSM technologies.
- Understanding of cryptographic standards, key protection requirements, and compliance frameworks governing HSM usage.
- Experience supporting operational and troubleshooting activities related to enterprise HSM infrastructure.
Preferred certifications:
- DigiCert Certified Professional (or equivalent PKI certification)
- Microsoft, AWS, or Azure security certifications with PKI focus
- CompTIA Security+ or equivalent cybersecurity certification
- CISSP, CISM, or CCSP is a plus
Contact: 02 9412 4178 for more details.
www.ayaninfotech.com
We vet all employer accounts and do our best to keep job ads safe, but scams can still occur. Be cautious when sharing personal information — never provide financial details or make payments during the application process. For extra security, use the Apply button on our site when proceeding.
Skills
0 of 20 matchedLicenses & certifications
0 of 4 matchedAyan Infotech