Ayan Infotech are looking for a PKI Certificate Lifecycle Management Engineer/Architect for a long term contract job opportunity in Melbourne.
All applicants must have full unrestricted work rights in Australia.
Title: PKI Certificate Lifecycle Management Engineer/ Architect Location: Melbourne Type: Contract (6+ months) Role Summary The PKI Certificate Lifecycle Management (CLM) Engineer / Architect is responsible for the design, implementation, enablement, and ongoing operation of enterprise PKI and certificate lifecycle management solutions.
This role will support a long-term, multi-phase PKI improvement initiative, focused on implementing and operationalising DigiCert One (SaaS) to improve certificate governance, automation, and compliance across the organisation.
The role will work closely with security, infrastructure, and application teams throughout phases of the program, while also providing BAU and operational support once the platform is live.
Required Skills Experience Strong expertise in Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) concepts and operations.
Hands-on experience with DigiCert One, including Trust Lifecycle Manager (TLM).
Proven experience managing the full certificate lifecycle, including issuance, renewal, revocation, and expiration management.
Solid understanding of X.509 certificates, TLS/SSL, key pairs, and cryptographic algorithms.
Experience supporting enterprise-scale PKI environments across hybrid (on-prem and cloud) infrastructures.




Familiarity with certificate discovery, automation, and governance frameworks.
Strong troubleshooting skills for certificate?
related issues impacting applications, endpoints, and infrastructure.
Experience working with Windows and Linux operating systems in secure environments.
Understanding of security controls, encryption standards, and compliance requirements related to PKI.
Strong hands-on experience with Hardware Security Modules (HSMs) and enterprise key management solutions.
Proven experience implementing and managing HSM-backed PKI environments for Root CA, Intermediate CA, and certificate lifecycle management platforms.
Knowledge of HSM concepts including key generation, secure key storage, key backup/recovery, partition management, and cryptographic operations.
Experience integrating PKI platforms such as DigiCert One, Microsoft ADCS, Entrust, or similar solutions with HSM technologies.
Understanding of cryptographic standards, key protection requirements, and compliance frameworks governing HSM usage.
Experience supporting operational and troubleshooting activities related to enterprise HSM infrastructure.
Preferred certifications: DigiCert Certified Skilled (or equivalent PKI certification) Microsoft, AWS, or Azure security certifications with PKI focus CompTIA Security+ or equivalent cybersecurity certification CISSP, CISM, or CCSP is a plus Contact: ************ for more details.

📌 Pki Certificate Lifecycle Management Architect - Melbourne
🏢 AYAN INFOTECH
📍 Melbourne