Job Description

n

Ayan Infotech are looking for a PKI Certificate Lifecycle Management Engineer/Architect for a long term contract job opportunity in Melbourne.

n

All applicants must have full unrestricted work rights in Australia.

n

Title: PKI Certificate Lifecycle Management Engineer/ Architect

n

Location: Melbourne

n

Type: Contract (6+ months)

Role Summary n

The PKI Certificate Lifecycle Management (CLM) Engineer / Architect is responsible for the design, implementation, enablement, and ongoing operation of enterprise PKI and certificate lifecycle management solutions. This role will support a long-term, multi-phase PKI improvement initiative, focused on implementing and operationalising DigiCert One (SaaS) to improve certificate governance, automation, and compliance across the organisation.

n

The role will work closely with security, infrastructure, and application teams throughout phases of the program, while also providing BAU and operational support once the platform is live.

Required Skills & Experience n

n
- Strong expertise in Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) concepts and operations.
n
- Hands-on experience with DigiCert One, including Trust Lifecycle Manager (TLM).
n
- Proven experience managing the full certificate lifecycle, including issuance, renewal, revocation, and expiration management.
n
- Solid understanding of X.509 certificates, TLS/SSL, key pairs, and cryptographic algorithms.
n
- Experience supporting enterprise-scale PKI environments across hybrid (on-prem and cloud)



infrastructures.
n
- Familiarity with certificate discovery, automation, and governance frameworks.
n
- Solid troubleshooting skills for certificate?related issues impacting applications, endpoints, and infrastructure.
n
- Experience working with Windows and Linux operating systems in secure environments.
n
- Understanding of security controls, encryption standards, and compliance requirements related to PKI.
n
- Strong hands-on experience with Hardware Security Modules (HSMs) and enterprise key management solutions.
n
- Proven experience implementing and managing HSM-backed PKI environments for Root CA, Intermediate CA, and certificate lifecycle management platforms.
n
- Knowledge of HSM concepts including key generation, secure key storage, key backup/recovery, partition management, and cryptographic operations.
n
- Experience integrating PKI platforms such as DigiCert One, Microsoft ADCS, Entrust, or similar solutions with HSM technologies.
n
- Understanding of cryptographic standards, key protection requirements, and compliance frameworks governing HSM usage.
n
- Experience supporting operational and troubleshooting activities related to enterprise HSM infrastructure.
n

Preferred certifications: nn
- DigiCert Certified Professional (or equivalent PKI certification)
n
- Microsoft, AWS, or Azure security certifications with PKI focus
n
- CompTIA Security+ or equivalent cybersecurity certification
n
- CISSP, CISM, or CCSP is a plus
n

n

Contact: for more details.

n

#J-18808-Ljbffr

📌 PKI Certificate Lifecycle Management Architect - Melbourne
🏢 Ayan Infotech Pty
📍 Melbourne