Identity Security – PKI Engineer

Responsibilities

• Design, deploy, and manage enterprise‑grade PKI solutions
• Lead certificate lifecycle management efforts using various tools
• Automate PKI‑related tasks and processes
• Collaborate with security, infrastructure, and Dev Ops teams to integrate PKI solutions with various platforms and applications
• Develop and enforce policies, standards, and best practices for certificate issuance, renewal, and revocation
• Monitor PKI infrastructure health, availability, and compliance with internal and regulatory requirements
• Troubleshoot PKI‑related issues including certificate chain validation, CRL/OCSP configurations, and encryption/signing issues
• Provide documentation, technical guidance, and training to internal teams
• Business travel is required as needed

• US Citizenship required
• Ability to obtain and maintain a US Government Security Clearance
• Bachelor's degree in Systems Engineering, Cyber Security Engineering, Computer Engineering, Computer Science, Information Systems, or similar discipline and 3+ years of relevant experience OR a Master's degree in the same fields and 2+ years of relevant experience
• Design, deployment and lifecycle management of Public Key Infrastructure (PKI)
• Key length standards and hashing algorithms
• Experience of PKI integration with Active Directory, Identity and PAM solutions
• Understanding of X.509 certificates, OCSP and Certificate management protocol
• Active US Government Top Secret (TS) Security Clearance with the ability to obtain and maintain SCI access (preferred)
• Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment (preferred)
• Experience with business continuity and disaster recovery (preferred)
• Experience with scripting in Windows and UNIX environment (preferred)
• Experience with Microsoft SQL Server 2019/2022 (preferred)
• Experience with Web Tech: HTML, JavaScript, JSP, XML, XSL, and DTD (preferred)