PKI & Cryptographic Services Engineer

As a PKI & Cryptographic Services Engineer at DT PROJECTS, you join the Technology Operations team supporting business-critical PKI and Digital Trust services. You'll take responsibility for the day-to-day support, maintenance, monitoring and troubleshooting of cryptographic services and the infrastructure that supports them, working across PKI and certificate management, Windows and Linux, networking, Active Directory and LDAP, databases, HSMs and security infrastructure.

What you'll do

• Support and maintain PKI, Digital Trust and cryptographic services across production environments
• Investigate and resolve technical issues spanning applications, operating systems, networks, databases and directory services
• Manage certificate lifecycle activities including issuance, renewal, revocation, discovery, certificate profiles and trust chains
• Configure, monitor and troubleshoot Windows and Linux servers and supporting services
• Work with CA and certificate management platforms including Entrust, EJBCA and Venafi
• Support Hardware Security Modules, including Thales Luna and nCipher/Entrust environments
• Troubleshoot Active Directory, LDAP and authentication issues affecting PKI platforms
• Monitor production systems, logs, alerts and platform health, identifying and escalating issues before they affect service availability
• Troubleshoot SSL/TLS, certificate bindings and certificate-enabled applications
• Diagnose networking and connectivity issues across routing, ports, firewalls and application infrastructure
• Support PostgreSQL and MSSQL environments where they integrate with PKI services
• Assist with high availability, clustering and replication environments
• Manage incidents, service requests and changes through the Service Desk
• Work directly with customers, internal engineering teams and technology vendors to resolve technical problems
• Continue developing your knowledge across PKI, HSMs, certificate management and the wider cryptographic technology environment

What you bring

• An IT degree, diploma or relevant technical certification
• 2 to 5 years of relevant technical experience, ideally across infrastructure, systems administration, information security or PKI
• Strong hands-on experience with Windows Server and Linux administration
• Good networking knowledge covering TCP/IP, routing, switching, ports, firewalls and the OSI model
• Experience troubleshooting production systems using monitoring tools, application logs and system logs
• Understanding of PKI and certificate management concepts
• Experience with certificate-enabled technologies such as SSL/TLS, S/MIME or Code Signing
• Experience with Active Directory and/or LDAP
• 2 years of PowerShell scripting experience
• Strong troubleshooting skills with the ability to work methodically across application, operating system, network and infrastructure layers
• Clear communication skills and the ability to work effectively with customers and technical teams
• A willingness to learn specialist technologies and take increasing ownership of complex environments
• Reliable transport

Nice to have

• Exposure to Entrust, EJBCA, Venafi, HSMs or certificate lifecycle management platforms
• PostgreSQL and/or MSSQL knowledge
• REST API or scripting experience beyond PowerShell
• Exposure to IIS, Apache, clustering, replication, virtualisation or containerisation
• Certifications such as A+, N+, Security+ or CEH

What we offer

• Salary up to R60,000 per month
• Onsite role in Sandton, Johannesburg