PKI Engineer Certificate Management Specialist

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

iQuasar LLC has an exciting opportunity for a PKI Engineer / Certificate Management Specialist to join our growing team.

The PKI Engineer will support USCIS PKI management and modernization, including device certificate lifecycle management, NPE certificate authority support, person-centric PKI, PIV-based certificate authentication, and automation of certificate request and approval processes.

We are seeking a PKI Engineer / Certificate Management Specialist for a contract position.

PKI Engineer / Certificate Management Specialist. Position Type:
Full-time-Remote

• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.

• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required USCIS access.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.

• Experience with DHS CA4, NPE CA, person-centric PKI, DHS 4300A, PKI interface specifications, or COPG.
• Experience with HSMs, Hashi Corp, Certbot, Let’s Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
• Prior DHS, USCIS, or federal civilian PKI experience.
• Experience automating manual certificate workflows.
• Experience supporting Apple/mobile device certificates.

We are an Equal Opportunity Employer and do not discriminate based on race, religion, color, national origin, political affiliation, sex, sexual orientation, gender identity, age, marital/parental/veteran status, disability, genetic information, membership in an employee organization, retaliation, military service, non-merit factors, or any other characteristics protected by applicable law.

This is a remote position.