PKI Administrator (FAA Enterprise Services
Listed on 2026-08-07
-
IT/Tech
Cybersecurity, Systems Engineer, Windows Server
Description
Concept Solutions is seeking a PKI & Identity Infrastructure Engineer (FAA Enterprise Services) supporting one of the nation’s most complex enterprise environments. We are seeking a highly skilled Senior PKI & Identity Infrastructure Engineer to serve as a technical authority across enterprise Public Key Infrastructure (PKI), identity services, directory systems, Linux/Windows administration, and secure cryptographic operations.
This role is ideal for an advanced systems engineer who thrives in high-security, large-scale federal environments and is passionate about securing enterprise authentication, certificate lifecycle management, and infrastructure resilience. You will play a key role in supporting secure digital trust across the FAA while collaborating with cybersecurity, infrastructure, and business stakeholders.
Enterprise PKI & Cryptographic Services- Serve as a senior technical lead for enterprise PKI architecture, administration, and operational support across Certification Authorities (CAs), Registration Authorities (RAs), and Validation Authorities (VAs)
- Administer and maintain PKI platforms across Windows and Linux environments, including EJBCA operations, ACME, SCEP, certificate enrollment, CRL distribution, OCSP, CDP, and AIA services
- Execute and document PKI key ceremonies, offline root CA operations, and cryptographic material handling in compliance with Certificate Policies (CP) and Certification Practice Statements (CPS)
- Manage and maintain Hardware Security Modules (HSMs), including Thales and Luna platforms, ensuring compliance with federal cryptographic standards
- Support secure certificate lifecycle management, validation services, and enterprise trust models
- Administer Red Hat Enterprise Linux (RHEL) environments supporting PKI, identity, and application services including patching, hardening, authentication integration, and compliance
- Perform comprehensive Microsoft Windows Server administration including lifecycle management, patching, WSUS/Tanium baselines, hardening, backup validation, and remediation
- Support Docker/containerized solutions aligned with enterprise deployment and security standards
- Maintain supporting web/application infrastructure including IIS, Apache, and JBoss
- Support PostgreSQL and MariaDB environments for PKI and identity services
- Perform maintenance, backup validation, availability monitoring, and operational troubleshooting
- Ensure service reliability using SLA/SLO/SLI performance principles
- Develop and maintain SOPs, architecture diagrams, lifecycle documentation, audit artifacts, and operational procedures
- Partner with cybersecurity teams, FAA stakeholders, Lines of Business, and enterprise customers to support mission requirements
- Present technical solutions clearly to both technical and non-technical stakeholders
- Support compliance, audit readiness, and continuous service improvement
Requirements
- Bachelor’s degree in Information Systems, IT Management, Business Systems, MIS
- 5+ years or an additional 4+ years of relevant experience in lieu of an BS degree
- Advanced experience supporting enterprise PKI services in large-scale environments
- Strong expertise with Windows Server, Red Hat Enterprise Linux, and secure systems administration
- Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL
- Hands-on experience with HSM technologies (Thales, Luna, or equivalent)
- Knowledge of Docker/containerized infrastructure
- Experience with IIS, Apache, JBoss, PostgreSQL, and MariaDB
- Familiarity with federal cybersecurity, compliance, or FAA enterprise environments highly preferred
Compensation: $80K to $100K
Location and Schedule
- Location: Washington, DC
- Schedule: Monday through Friday, 9:00 AM – 3:00 PM (local time)
- Security Requirement: FAA Personnel Suitability Clearance required.
Company Profile:
Founded in 1999 and headquartered in Reston, Virginia, Concept Solutions, LLC (CS) is a leading small business in technology, engineering, and management consulting. We are the innovative and agile force behind strategic solutions that…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).