Senior PKI Engineer

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Laurel, MDFort Huachuca, AZ
Salary
$86,800–$198,000 / yr
Posted
35 days ago
Freshness
Confirmed live yesterday
Closes
Nov 5, 2026

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $173k
This role $142k
$72k most similar roles pay here $224k

This role pays less than 75% of similar roles. Most pay $142,400–$203,500 — the shaded band above. At the midpoint, this role pays about $142k versus about $173k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 802 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 783 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Senior PKI Engineer

As a PKI Engineer, Senior, you will join the Identity and Access Management team to support large-scale PKI projects for government clients. You will be responsible for analyzing the identity lifecycle, articulating access requirements, and defining enterprise identity records while designing, deploying, and supporting systems that manage credentials and verify user privileges. Your daily work involves managing single sign-on and privileged access systems to secure critical assets against adversaries. To succeed in this role, you must possess experience with Python, Perl, or base scripting languages, as well as Red Hat Certificate System, Dogtag PKI, or EJBCA. You will also develop technical documentation and support the end-to-end deployment of secure, PKI-based web applications. The role focuses on solving security challenges within the domain of Zero Trust and identity management for national security missions.

What you'll do

  • Design, deploy, and support PKI systems to manage credentials and verify user privileges.
  • Analyze the identity lifecycle to define enterprise identity records and access requirements.
  • Implement enterprise-class solutions for single sign-on and privileged access systems.
  • Support the end-to-end deployment of secure, PKI-based web applications.
  • Develop technical documentation regarding PKI processes and system configurations.
  • Manage large-scale PKI projects for government clients to ensure secure identity management.

What we're looking for

  • Secret clearance is required.
  • DoD 8570 Certification is required.
  • Bachelor's degree and 5+ years of experience in systems or network administration, or 9+ years of experience without a degree.
  • Experience deploying PKI solutions and supporting the end-to-end deployment of secure, PKI-based web applications.
  • Experience with Python, Perl, or Base scripting languages.
  • Experience with Red Hat Certificate System, Dogtag PKI, or EJBCA.
  • Experience developing technical documentation.
  • Experience with Java, AWS, cloud migrations, hybrid solutions, ActivClient, or DoD PKI (preferred); CISSP, CASP, or CCSP certification (preferred).

More like this

Similar roles

PKI Network Engineer

Booz Allen Hamilton

Quantico, VA 57 days ago $69,400$158,000
PKI Certificate Authority Active Directory Windows Server PowerShell VMware SAN Cisco Juniper HSM Axway OCSP UNIX Linux BMC Remedy Network Engineering Load Balancing
4+ yrs exp

Senior Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 2 days ago $86,800$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust MFA AWS Azure Google Cloud SCIM Okta Workflows Python PowerShell Bash

Identity Security PKI Engineer

Intel

Chandler, AZ 14 days ago $105,300$148,660
PKI X.509 OCSP Active Directory PAM Microsoft SQL Server HTML JavaScript JSP XML XSL DTD Windows UNIX Scripting Cyber Security Information Security Business Continuity Disaster Recovery
3+ yrs exp

Identity and Access Management Architect, Lead

Booz Allen Hamilton

Fort Meade, MD 16 days ago $99,000$225,000
IAM Zero Trust Active Directory Entra ID LDAP SailPoint Okta Saviynt SIEM UEBA PKI SSO NIST SP 800-53 STIGs JSIG Python REST XML JSON
7+ yrs exp

Identity and Access Management Architect, Lead

Booz Allen Hamilton

Fort Meade, MD 16 days ago $99,000$225,000
IAM Zero Trust Active Directory Entra ID LDAP SailPoint Okta Saviynt SIEM UEBA PKI SSO NIST SP 800-53 STIGs HSPD-12 Python REST JSON XML
7+ yrs exp

ICAM Architect

Booz Allen Hamilton

McLean, VA 63 days ago $86,800$198,000
Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Zero Trust MFA Saviynt Sailpoint Omada Oracle IAM CI/CD AWS Cognito Azure AD B2C Keycloak Google Cloud Identity