[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Mettler-Toledo International jobs](https://jobs.opennash.com/companies/mettler-toledo-international/) · [Search jobs](/search/) Mettler-Toledo International · Changzhou, Jiangsu, China # 22587-Cybersecurity Infrastructure Specialist Changzhou, Jiangsu, China IT & Infrastructure Listed on Mettler-Toledo International’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there. [Apply on Mettler-Toledo International’s careers site →](https://jobs.mt.com/en/job/changzhou/22587-cybersecurity-infrastructure-specialist/36870/97495800320) [OpenNash Jobs](https://jobs.opennash.com/) / [Mettler-Toledo International](https://jobs.opennash.com/companies/mettler-toledo-international/) / 22587-Cybersecurity Infrastructure Specialist ## Job description Our Opening and ### Your Responsibilities PKI & Certificate Lifecycle Management Lifecycle Automation: Own the end-to-end lifecycle (request, issuance, validation, deployment, renewal, and revocation) of all digital certificates, including SSL/TLS, SSH keys, and code-signing certificates. ### CA & Microsoft PKI Governance Maintain, audit, and optimize internal and external Certificate Authorities (CAs) to ensure absolute compliance with global cryptographic standards and corporate security policies. Oversee the comprehensive management of Microsoft PKI, including Certificate Revocation Lists (CRL), Online Certificate Status Protocol (OCSP), WebCA deployment, and SCEP/NDES integration with Microsoft Intune. ### Certificate Management Environments Operate and scale enterprise Certificate Management Environments to track, monitor, and remediate expiring or non-compliant certificates, successfully preventing operational outages. ### ACME Protocol Management Comprehend the deep underpinnings of the ACME protocol, managing its associated configuration, deployment, and the secure revocation of the service. ### Hardware Security Module (HSM) Operations Manage and maintain Luna Network HSM solutions. Direct key management operations within network HSM environments and demonstrate a firm understanding of HSM Partition functionality versus HSM Keyring functionality across High Availability (HA) and Cluster environments. Privileged Access Management (PAM) ### Platform Governance & JIT Adoption Manage and optimize core enterprise tier-1 PAM solutions. Drive the engineering adoption of Just-in-Time (JIT) provisioning, secure remote access, privilege containment, and zero-standing privilege workflows across the ecosystem. ### Identity Lifecycle Automation Supervise privileged account onboarding/offboarding and birthright access roles, while utilizing discovery checklists to identify unmanaged credentials and third-party accounts. Collaborate with architecture teams to implement automated self-service capabilities via identity governance (e.g.: Saviynt) and IT service management platform integrations (e.g., ServiceNow). ### Secrets & Server owners/Application Owners Secure the engineering footprint by enforcing automatic password rotation policies, defining practices for secure PowerShell scripting, and eliminating hardcoded or un-hashed system passwords across cloud workloads and containerized systems. Enforce password complexity rules and automated credential rotation immediately after use. ### Change Control & Infrastructure Maintenance Act as the internal escalation point for platform engineering health alerts, platform monitoring anomalies, software patching, and major environment upgrades. Coordinate infrastructure changes with business stakeholders and the Change Advisory Board (CAB) using established systems of record. ### Audit, Compliance & SOC Integration Configure session recording, isolation, and logging capabilities to provide a centralized view of privileged access. Utilize these detective controls to satisfy global governance frameworks (such as PCI-DSS v4.0 and SOX), regional compliance mandates (such as the China Cybersecurity Law), and operational root-cause analysis (RCA). Partner with the SOC to integrate PAM telemetry for enhanced tracking of malicious activity. ### DevSecOps & CI/CD Pipeline Integration Secure Pipeline Injection Collaborate tightly with the AppSec and DevOps teams to seamlessly inject automated certificate management, token management, and cryptographic vaulting natively into our software deployment pipelines (such as Azure DevOps or GitHub Actions). ### What You Need to Succeed Education Bachelor’s degree in Computer Science, Information Systems, Information Security, or a related field. ### Experience 5+ years in software infrastructure, network security, or application security development, with 3–5 years of dedicated hands-on experience focused on Identity and Access Management (IAM), infrastructure security, or PKI ecosystems. ### Technical Expertise Cryptographic Standards: Strong core understanding of network security, cryptography, application security, and direct competency in the X.509 body of knowledge. ### Advanced PKI Administration Proven experience managing Certificate Authorities, specifically Microsoft PKI infrastructures (CRL, OCSP, WebCA, and SCEP/NDES Intune integration). ### Protocols & Environments Practical experience with Certificate Management Environments and deep technical familiarity with the ACME protocol underpinnings (configuration, deployment, and revocation). ### HSM Management Hands-on experience with key management in network HSM, knowledge of Luna Network HSM solutions and understanding HSM Partition vs. HSM Keyring functionality (HA vs. Cluster) is a plus. ### PAM & Ecosystem Fluency Deep foundational knowledge of major tier-1 enterprise PAM tool architectures (such as CyberArk, BeyondTrust, or equivalent enterprise-grade solutions) and an understanding of secrets vaulting within modern cloud environments (AWS, Azure). Strong working familiarity with IT service management platforms (such as ServiceNow) and identity lifecycle governance integrations (such as SailPoint). ### Regional Compliance Knowledge Solid awareness of China’s cybersecurity regulatory environment (such as the China Cybersecurity Law and Data Security Law) as it applies to data localization, encryption, and access controls. ### Skills Analytical Skills: Excellent analytical and problem-solving abilities to mitigate architectural risks, perform root-cause analysis on failing credentials, and troubleshoot cryptographic issues. ### Communication Professional working proficiency in both Mandarin and English is required to effectively collaborate with local engineering teams and present initiatives to global security leadership. ### Certifications Industry certifications (e.g., CISSP, CISM, CSSLP, CEH, or specialized vendor certifications) are a plus. Our Offer to You Competitive compensation & benefit package Possibility to work in an international environment with multicultural team Interesting and challenging career in a successful leading global organization Trainings and professional development About Mettler Toledo METTLER TOLEDO is a global leader in precision instruments and services. We are renowned for innovation and quality across laboratory, process analytics, industrial, product inspection, and retailing applications. Our sales and service network is one of the most extensive in the industry. Our products are sold in more than 140 countries, and we have a direct presence in approximately 40 countries. For more information, please visit www.mt.com. Equal Opportunity Employment We promote equal opportunity worldwide and value diversity in our teams in terms of business background, area of expertise, gender and ethnicity. For more information on our commitment to Sustainability, Diversity and Equal Opportunity please visit us here ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Jul 12, 2026 - Last checked: Oct 18, 2026 - Listed for: 98 days - Location: Changzhou, Jiangsu, China[Apply on Mettler-Toledo International’s careers site →](https://jobs.mt.com/en/job/changzhou/22587-cybersecurity-infrastructure-specialist/36870/97495800320) ## More jobs at Mettler-Toledo International ### [21339-Sr. Software Engineer](https://jobs.opennash.com/companies/mettler-toledo-international/jobs/e9b0aa8636f3b3be1d91/) Changzhou, Jiangsu, China ### [21532-高级机械工程师](https://jobs.opennash.com/companies/mettler-toledo-international/jobs/05d53742ae4f49f2c12e/) Changzhou, Jiangsu, China ### [21723-SW/HW Team Supervisor](https://jobs.opennash.com/companies/mettler-toledo-international/jobs/385f3c8c0cfa4cf8f9ff/) Changzhou, Jiangsu, China ### [22031-SQA Engineer Senior](https://jobs.opennash.com/companies/mettler-toledo-international/jobs/4047fa0be30efd4a49ca/) Changzhou, Jiangsu, China ### [22162-采购工程师](https://jobs.opennash.com/companies/mettler-toledo-international/jobs/1aa713efe6fc73c250c5/) Changzhou, Jiangsu, China ## Similar jobs at other companies ### [Industrial Cybersecurity Expert for Critical Infrastructure](https://jobs.opennash.com/companies/siemens-energy/jobs/a140edde5053c670439a/) Siemens Energy · Bucharest, Romania ### [IT Operations, Infrastructure & Cybersecurity Lead / IT 架構與資安專案經理](https://jobs.opennash.com/companies/veolia-environnement/jobs/62dfa2037540d61ab065/) Veolia Environnement · Taipei City, Taiwan ### [Cybersecurity Specialist - OT & IoT Infrastructure](https://jobs.opennash.com/companies/continental/jobs/6ed1bec5207d65c0b42b/) Continental · Petaling Jaya, Selangor, Malaysia ### [IT Project Manager (Infrastructure / Cybersecurity specialization)](https://jobs.opennash.com/companies/saputo/jobs/436338f8576f0f2e17bb/) Saputo ### [Lead Cybersecurity Architect](https://jobs.opennash.com/companies/jpmorganchase/jobs/4c2a396877e3dcff6a61/) JPMorganChase · Singapore OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)