Job Description
n
Ayan Infotech are looking for a
PKI Certificate Lifecycle Management Engineer/Architect
for a long term contract job opportunity in Melbourne.
n
All applicants must have full unrestricted work rights in Australia.
n
Title:
PKI Certificate Lifecycle Management Engineer/ Architect
n
Location: Melbourne
n
Type: Contract (6+ months)
Role Summary n
The
PKI Certificate Lifecycle Management (CLM) Engineer / Architect
is responsible for the design, implementation, enablement, and ongoing operation of enterprise PKI and certificate lifecycle management solutions. This role will support a long-term, multi-phase PKI improvement initiative, focused on implementing and operationalising
DigiCert One (SaaS)
to improve certificate governance, automation, and compliance across the organisation.
n
The role will work closely with security, infrastructure, and application teams throughout
phases
of the program, while also providing
BAU and operational support
once the platform is live.
Required Skills & Experience n
n
Strong expertise in Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) concepts and operations.
n
Hands-on experience with DigiCert One, including Trust Lifecycle Manager (TLM).
n
Proven experience managing the full certificate lifecycle, including issuance, renewal, revocation, and expiration management.
n
Solid understanding of X.509 certificates, TLS/SSL, key pairs, and cryptographic algorithms.
n
Experience supporting enterprise-scale PKI environments across hybrid (on-prem and cloud)



infrastructures.
n
Familiarity with certificate discovery, automation, and governance frameworks.
n
Strong troubleshooting skills for
certificate?related
issues impacting applications, endpoints, and infrastructure.
n
Experience working with Windows and Linux operating systems in secure environments.
n
Understanding of security controls, encryption standards, and compliance requirements related to PKI.
n
Strong hands-on experience with Hardware Security Modules (HSMs) and enterprise key management solutions.
n
Proven experience implementing and managing HSM-backed PKI environments for Root CA, Intermediate CA, and certificate lifecycle management platforms.
n
Knowledge of HSM concepts including key generation, secure key storage, key backup/recovery, partition management, and cryptographic operations.
n
Experience integrating PKI platforms such as DigiCert One, Microsoft ADCS, Entrust, or similar solutions with HSM technologies.
n
Understanding of cryptographic standards, key protection requirements, and compliance frameworks governing HSM usage.
n
Experience supporting operational and troubleshooting activities related to enterprise HSM infrastructure.
n
Preferred certifications: n
n
DigiCert Certified Qualified (or equivalent PKI certification)
n
Microsoft, AWS, or Azure security certifications with PKI focus
n
CompTIA Security+ or equivalent cybersecurity certification
n
CISSP, CISM, or CCSP is a plus
n
n
Contact: for more details.
n
#J-*****-Ljbffr

📌 Pki Certificate Lifecycle Management Architect - Melbourne
🏢 Ayan Infotech Pty
📍 Melbourne