Public Key Infrastructure and Cryptographic Specialist

Location: Centurion, Gauteng (provisional – to be confirmed)
Positions Available: 5
Salary: Market-related
Employment Type: To be confirmed

We are seeking experienced and technically proficient Public Key Infrastructure (PKI) and Cryptographic Specialists to design, implement, administer, secure and maintain enterprise Public Key Infrastructure and cryptographic security solutions.

The successful candidates will be responsible for managing digital certificates, encryption technologies, cryptographic keys, certificate authorities and associated security infrastructure to ensure the confidentiality, integrity and authenticity of organisational systems, applications and communications.

This role requires strong hands‑on expertise in PKI architecture, certificate lifecycle management, cryptographic protocols, Hardware Security Modules (HSMs), encryption technologies and enterprise security integration.

The ideal candidates will have proven experience implementing and supporting PKI and cryptographic solutions within complex enterprise IT environments, with a strong understanding of information security, identity management and regulatory compliance.

Public Key Infrastructure Management

• Design, implement, configure and maintain enterprise Public Key Infrastructure environments.
• Install, configure and administer Certificate Authorities (CAs), including root and subordinate CAs.
• Manage certificate issuance, renewal, revocation, expiration and lifecycle processes.
• Implement and maintain certificate templates, certificate policies and certificate enrolment procedures.
• Configure and manage Microsoft Active Directory Certificate Services (AD CS) or equivalent PKI platforms.
• Maintain Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP) services.
• Monitor PKI infrastructure availability, performance and security.
• Troubleshoot certificate validation, trust chain, authentication and encryption issues.
• Support PKI upgrades, migrations, integrations and infrastructure modernisation projects.
• Maintain accurate certificate inventories and PKI configuration documentation.

Cryptographic Key Management and Security

• Implement and manage cryptographic key generation, storage, distribution, rotation, revocation and destruction processes.
• Configure and maintain secure encryption and key management solutions.
• Support the implementation and administration of Hardware Security Modules (HSMs).
• Manage cryptographic policies, key protection controls and secure key storage mechanisms.
• Implement appropriate symmetric and asymmetric encryption technologies.
• Support digital signature, certificate‑based authentication and secure communication solutions.
• Ensure cryptographic controls align with organisational security policies and recognised industry standards.
• Investigate cryptographic security vulnerabilities and recommend remediation measures.
• Support cryptographic key recovery, backup and disaster recovery procedures.
• Assist with cryptographic algorithm and protocol modernisation initiatives.

Certificate Lifecycle Management

• Implement automated certificate discovery, issuance, renewal and revocation processes.
• Monitor certificate expiration dates and prevent certificate‑related service disruptions.
• Manage internal and externally issued digital certificates.
• Support certificate deployment across servers, applications, network devices and cloud environments.
• Implement certificate management policies and operational procedures.
• Configure and maintain certificate enrolment and automated certificate management solutions.
• Investigate and resolve certificate‑related incidents affecting enterprise systems.
• Maintain certificate lifecycle reports,…