Cyber Security Architect – PKI & Digital Signing Engineer

About the role

We are looking for an experienced PKI & Digital Signing Engineer to design, implement, administer, and support our enterprise Public Key Infrastructure (PKI) and digital signing platforms. The role spans both Windows and Linux environments and requires hands‑on expertise with SigningHub, ADSS Server, and Entrust Certificate Authority.

Key responsibilities

• Design, implement, and maintain enterprise PKI solutions, including CA infrastructure, certificate lifecycle, OCSP responders, CRLs, and enrollment services.
• Deploy, configure, and manage SigningHub and ADSS Server for digital signatures, timestamping, and validation.
• Administer Entrust Certificate Authority and integrate signing platforms with identity and document management systems.
• Monitor, harden, and ensure high availability, disaster recovery, and compliance of PKI and signing services.
• Provide technical support for TLS/SSL, API integrations, and complex certificate or encryption issues.
• Automate operational tasks using PowerShell, Bash, or other scripting languages.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Proven experience designing and operating enterprise PKI and digital signing infrastructures.
• Strong understanding of security standards, compliance requirements, and cryptographic best practices.

Required skills

• PKI architecture and Certificate Authority management
• SigningHub, ADSS Server, Entrust Certificate Authority
• Windows Server and Linux administration
• PowerShell and Bash scripting
• TLS/SSL, API integration, identity management platforms
• Digital signature standards: PAdES, XAdES, CAdES, eIDAS
• OCSP, CRL, certificate templates, enrollment services