Job Description

Job Responsibilities

• Architect and deploy CA systems, including Root CA, Subordinate CAs, CRL/OCSP responders, timestamping authority (TSA), and repository services.
• Manage HSMs for secure key generation, storage, rotation, and destruction in line with standards.
• Implement secure certificate issuance, renewal and revocation using OpenSSL and PKI platforms.
• Ensure PKI operations meet MCMC regulations, WebTrust/ETSI requirements, and internal security policies.
• Configure and maintain LDAP directories to store and publish issued certificates, CRLs, and CA information.
• Maintain logs, implement digital signatures for integrity, and support internal/external audits.
• Oversee system monitoring (Checkmk) and implement log integrity controls (Wazuh) to support security and compliance requirements.

Job Requirements

Job Requirements

• Diploma/Degree in IT, Cybersecurity, or related field.
• 2–5 years of experience in information security, compliance, or audit.
• Strong understanding of compliance frameworks, PKI basics, and security controls (training provided if not PKI-specific).
• Basic knowledge AD/LDAP, Checkmk & Wazuh.
• Strong knowledge of encryption, tokenization, server administration (Windows & Linux), key management system, AD/LDAP, DNS, GPO, TLS/SSL
• Good written and spoken communication in Bahasa Malaysia and English.
• Knowledge of additional languages (e.g., Mandarin, Tamil, Arabic) is an advantage.

Skills