[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Generali Group jobs](https://jobs.opennash.com/companies/generali-group/) · [Search jobs](/search/)

Generali Group · Milano

# Platform Security Engineer – PKI & Cryptography

Milano Security 

Listed on Generali Group’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there.
[Apply on Generali Group’s careers site →](https://gogenerali.com/home/job/ATS-P-374477be-2413-4bd2-b2a6-417f2b86a2a2/Platform%20Security%20Engineer%20%E2%80%93%20PKI%20%26%20Cryptography)

[OpenNash Jobs](https://jobs.opennash.com/) / [Generali Group](https://jobs.opennash.com/companies/generali-group/) / Platform Security Engineer – PKI & Cryptography

## Job description

We are looking for a highly skilled Platform Security Engineer with strong expertise in Public Key Infrastructure (PKI), Digital Certificates, Hardware Security Modules (HSMs), and Cryptography to join our growing Platform Security team. The successful candidate will play a key role in designing, implementing, and managing security services that underpin our enterprise infrastructure and applications, ensuring trust, integrity, and compliance across our platforms.

### Key Responsibilities
- Design, deploy, and manage PKI services, including root and subordinate Certificate Authorities (CAs)
- Oversee the lifecycle of digital certificates (issuance, renewal, revocation, automation) managing the CLM solution of the Group
- Administer and maintain Hardware Security Modules (HSMs), ensuring secure key storage and operations
- Support the management of cryptographic solutions (symmetric/asymmetric encryption, key management, signing, hashing)
- Collaborate with IT, DevOps, and application teams to integrate certificate and cryptography services into enterprise platforms and applications
- Define, enforce, and monitor compliance with internal security standards, industry best practices, and regulatory requirements (e.g., DORA, eIDAS, NIST, ISO 27001)
- Support audits and security assessments by providing evidence, documentation, and subject matter expertise Troubleshoot PKI, certificate, and cryptographic issues across multiple environments
- Research and evaluate emerging cryptographic technologies, standards, and trends
- Develop automation scripts and workflows to streamline PKI and certificate management

## Qualifications

### Our ideal candidate will meet the following requirements
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent professional experience)
- Proven experience with PKI design, deployment, and operations in enterprise environments Hands-on expertise with digital certificates management (SSL/TLS, client authentication, code signing, device certificates) Experience with HSM administration and key management best practices
- Strong knowledge of cryptography principles (RSA, ECC, AES, SHA, TLS protocols, key exchange mechanisms)
- Familiarity with automation and scripting (e.g., PowerShell, Python, Bash) for certificate lifecycle management
- Solid understanding of security frameworks and compliance standards (DORA, NIST, ISO, PCI DSS, eIDAS)
- Strong troubleshooting, problem-solving, and analytical skills
- Excellent communication skills and ability to work collaboratively across teams Nice to have: Experience with cloud-native PKI and certificate management services
- Proficient in SecOps and DevSecOps, integrating cryptographic services into security monitoring, incident response, and CI/CD pipelines, including PKI, certificate management, and cryptographic controls
- Knowledge of DevOps and CI/CD environments with certificate automation (e.g., HashiCorp Vault, cert-manager, ACME/Let’s Encrypt) Certifications such as CISSP, CISM, CCSP, Microsoft Certified: Security, Compliance, and Identity, or vendor-specific PKI/HSM certifications
- Familiarity with zero trust architectures and secure identity management

## At a glance
- Posted by the employer: Not stated
- First seen by OpenNash: Jul 31, 2026
- Last checked: Oct 18, 2026
- Listed for: 79 days
- Location: Milano[Apply on Generali Group’s careers site →](https://gogenerali.com/home/job/ATS-P-374477be-2413-4bd2-b2a6-417f2b86a2a2/Platform%20Security%20Engineer%20%E2%80%93%20PKI%20%26%20Cryptography)

## More jobs at Generali Group

### [Corporate & Physical Security Intern](https://jobs.opennash.com/companies/generali-group/jobs/6468e695c9c89322d2d2/)

Milano

### [Corporate, Physical & Cyber Security Intern](https://jobs.opennash.com/companies/generali-group/jobs/6dfa3df776f52608e393/)

Milano

### [Cyber Underwriter](https://jobs.opennash.com/companies/generali-group/jobs/d01f5ad567ad9b9682db/)

Milano

### [ICT & Cyber Risk Manager](https://jobs.opennash.com/companies/generali-group/jobs/d8106135991650950c2b/)

Milano

### [Senior Cyber Insurance Underwriter](https://jobs.opennash.com/companies/generali-group/jobs/76af93cd499c32304991/)

Milano

## Similar jobs at other companies

### [Security Platform Engineer](https://jobs.opennash.com/companies/ntt/jobs/e7fd19a8f94a58b891e8/)

NTT · Hyderabad, Telangāna, India

### [PKI Engineer - C# Expert](https://jobs.opennash.com/companies/citigroup/jobs/86deab14f69612ee5b2a/)

Citigroup · Chennai Tamil Nadu India

### [PKI Engineer - Java /Cloud Expert](https://jobs.opennash.com/companies/citigroup/jobs/6caf9288f8c74355c665/)

Citigroup · Chennai Tamil Nadu India

### [Python DevOps Security Platform Engineer (m/f/d)](https://jobs.opennash.com/companies/siemens/jobs/0e1b58cd21d3b2bc382c/)

Siemens 

### [Junior PKI Engineer (m/f/d)](https://jobs.opennash.com/companies/basf/jobs/247868116e3bbc1db9b6/)

BASF · ${htmlLocations}

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)