PKI Engineer - Active TS​/SCI With CI Poly

PKI Engineer/IAM Engineer

We are seeking an experienced PKI Engineer/IAM Engineer to support enterprise Identity and Access Management (IAM), PKI, and Zero Trust initiatives. In this role, you will design, implement, automate, and maintain secure identity and cryptographic infrastructure solutions for large-scale enterprise environments.

You will work closely with stakeholders, security teams, and infrastructure engineers to support authentication, authorization, certificate management, and credential lifecycle processes. The ideal candidate will have strong Linux administration skills, deep understanding of certificate lifecycle management, and experience building secure PKI solutions in enterprise environments.

Key Responsibilities

• Design, implement, configure, and maintain enterprise PKI environments
• Administer and support Linux-based systems hosting PKI services and related infrastructure
• Manage certificate lifecycle operations including issuance, renewal, revocation, validation, and expiration monitoring
• Develop and maintain automation for certificate deployment and lifecycle management using Ansible and Bash scripting
• Configure and manage LDAP integrations and directory services related to PKI environments
• Define and maintain policies, standards, and operational procedures
• Troubleshoot PKI-related issues involving certificates, trust chains, TLS/SSL configurations, and cryptographic services
• Collaborate with security and infrastructure teams to ensure compliance with enterprise security standards and best practices
• Implement monitoring, auditing, backup, and disaster recovery procedures for PKI systems
• Support asymmetric cryptography implementations and secure communications across enterprise platforms
• Create and maintain technical documentation, architecture diagrams, and operational playbooks