Identity Security PKI Engineer

What you'll do

• Design, deploy, and manage enterprise-grade Public Key Infrastructure (PKI) solutions.
• Lead certificate lifecycle management efforts using various automated tools and processes.
• Develop and enforce policies, standards, and best practices for certificate issuance, renewal, and revocation.
• Monitor PKI infrastructure health, availability, and compliance with internal and regulatory requirements.
• Troubleshoot PKI-related issues including certificate chain validation, CRL/OCSP configurations, and encryption problems.
• Integrate PKI solutions with Active Directory, Identity, and PAM platforms.
• Provide technical guidance, documentation, and training to internal teams.

What we're looking for

• US Citizenship is required.
• Ability to obtain and maintain a US Government Security Clearance is required.
• Bachelor's degree in a relevant engineering or computer science field and 3+ years of relevant experience is required.
• Master's degree in a relevant engineering or computer science field and 2+ years of relevant experience is required.
• Experience in design, deployment, and lifecycle management of PKI key length standards and hashing algorithms is required.
• Experience integrating PKI with Active Directory, Identity, and PAM solutions is required.
• Understanding of X.509 certificates, OCSP, and certificate management protocols is required.
• Active US Government Top Secret clearance with SCI access, DoD security experience, and scripting skills are preferred.