Remote PKI & Certificate Lifecycle Engineer

United States

Suitability/Public Trust

Fully remote

Software Engineering Services

GovCIO is seeking an experienced Information Systems Engineer to support critical certificate authority infrastructure. This role involves managing large enterprise level certificates while navigating upcoming industry changes that will significantly reduce certificate validity periods and increase renewal frequency. This position will be within United States and will be fully remote.

Certificate Lifecycle Management

• Review, approve, or reject PKI/SSL certificate requests on a daily basis
• Manage complete certificate lifecycle including CSR processing, enrollment, renewal, replacement, and revocation
• Support court Points of Contact (POCs) throughout the certificate management process
• Coordinate with internal and external Certificate Authorities for certificate issuance

Technical Support & Troubleshooting

• Provide technical assistance to courts experiencing PKI/SSL certificate issues
• Diagnose and resolve certificate-related problems across enterprise websites and resources
• Escalate complex issues to PKI/SSL vendors when necessary
• Document troubleshooting procedures and maintain knowledge base

Security Monitoring & Compliance

• Conduct daily reviews of Certificate Revocation Lists (CRL) for unauthorized certificates
• Monitor Certificate Transparency logs to validate certificate authenticity
• Identify and elevate security discrepancies or anomalies
• Ensure compliance with evolving industry standards and enterprise security policies

Process Improvement & Automation

• Prepare for implementation of Certificate Lifecycle Management (CLM) tool in 2026
• Adapt processes to accommodate shortened certificate validity periods
• Develop strategies to manage increased renewal frequency efficiently

Bachelor's degree in Computer Science, Information Security, or related field with 8+ years (or commensurate experience)

Required Skills and Experience

• 3+ years of experience with PKI/SSL certificate management
• Strong understanding of X.509 certificates, Certificate Authorities, and PKI infrastructure
• Experience with certificate lifecycle management tools and processes
• Knowledge of SSL/TLS protocols and implementation

Security & Compliance

• Understanding of security frameworks and compliance requirements
• Experience with Certificate Revocation Lists (CRL) and Certificate Transparency logs
• Familiarity with government security standards and practices
• Knowledge of current and emerging PKI industry standards

Communication & Support

• Excellent customer service and communication skills
• Ability to provide technical support to non-technical users
• Strong documentation and training capabilities
• Experience working with multiple stakeholders across different organizational levels
• On-call support may be required for critical certificate issues

Clearance Required: Must be able to attain and maintain an AOUSC Public Trust

Preferred Skills and Experience

• Security+ or other relevant security certifications
• Experience with government systems
• Knowledge of certificate automation tools and scripting
• Familiarity with large enterprise environments
• Previous experience managing large-scale certificate deployments

USD $ - USD $ /Yr.

• Employee Assistance Program (EAP)
• Corporate Discounts
• Learning & Development platform, to include certification preparation content
• Training, Education and Certification Assistance*
• Referral Bonus Program
• Internal Mobility Program
• Pet Insurance
• Flexible Work Environment

* Available to full-time employees

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.

Posted Pay Range

The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an “at-will position” and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.