PKI & Cryptographic Services Engineer

We are currently hiring a PKI & Cryptographic Services Engineer for a permanent, onsite role in Sandton, Johannesburg.

This is a hands-on engineering opportunity for someone who enjoys solving complex infrastructure and security problems and wants to build deeper expertise in Public Key Infrastructure (PKI), cryptographic services and digital trust.

Our client operates within the information security space, supporting business-critical PKI and Digital Trust services. You’ll join the Technology Operations team, taking responsibility for the day-to-day support, maintenance, monitoring and troubleshooting of cryptographic services and the infrastructure that supports them.

The environment is technically broad. You’ll work across PKI and certificate management, Windows and Linux, networking, Active Directory and LDAP, databases, HSMs and security infrastructure. This would suit an engineer who is already strong across systems and infrastructure and wants to develop further into PKI and cryptographic technologies. _Cryptographic S… _Skills Required

Tech:
Entrust CA, EJBCA, Entrust CLM/EAS, Venafi, Thales Luna HSM, nCipher/Entrust HSM, Windows Server, Oracle/RHEL Linux, OpenLDAP, AD LDS, Active Directory, PostgreSQL, MSSQL, IIS, Apache, OpenSSL, Splunk, REST APIs and Power Shell. _Skills Required

Salary: R60,000 per month.

Duties and Responsibilities:

• Support and maintain PKI, Digital Trust and cryptographic services across production environments.
• Investigate and resolve technical issues spanning applications, operating systems, networks, databases and directory services.
• Manage certificate lifecycle activities including issuance, renewal, revocation, discovery, certificate profiles and trust chains.
• Configure, monitor and troubleshoot Windows and Linux servers and supporting services.
• Work with CA and certificate management platforms including Entrust, EJBCA and Venafi.
• Support Hardware Security Modules, including Thales Luna and nCipher/Entrust environments.
• Troubleshoot Active Directory, LDAP and authentication issues affecting PKI platforms.
• Monitor production systems, logs, alerts and platform health, identifying and escalating issues before they affect service availability.
• Troubleshoot SSL/TLS, certificate bindings and certificate-enabled applications.
• Diagnose networking and connectivity issues across routing, ports, firewalls and application infrastructure.
• Support PostgreSQL and MSSQL environments where they integrate with PKI services.
• Assist with high availability, clustering and replication environments.
• Manage incidents, service requests and changes through the Service Desk.
• Work directly with customers, internal engineering teams and technology vendors to resolve technical problems.
• Continue developing your knowledge across PKI, HSMs, certificate management and the wider cryptographic technology environment.

Requirements:

• IT degree, diploma or relevant technical certification.
• 2 to 5 Years of relevant technical experience, ideally across infrastructure, systems administration, information security or PKI.
• Strong hands-on experience with Windows Server and Linux administration.
• Good networking knowledge covering TCP/IP, routing, switching, ports, firewalls and the OSI model.
• Experience troubleshooting production systems using monitoring tools, application logs and system logs.
• Understanding of PKI and certificate management concepts.
• Experience with certificate-enabled technologies such as SSL/TLS, S/MIME or Code Signing.
• Experience with Active Directory and/or LDAP.
• Exposure to Entrust, EJBCA, Venafi, HSMs or certificate lifecycle management platforms would be highly valuable.
• PostgreSQL and/or MSSQL knowledge would be advantageous.
• REST API,…