Public Key Infrastructure Engineer

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Washington, DCMcLean, VA
Salary
$86,800–$198,000 / yr
Posted
2 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $178k
This role $142k
$70k most similar roles pay here $242k

This role pays less than 83% of similar roles. Most pay $149,500–$206,475 — the shaded band above. At the midpoint, this role pays about $142k versus about $178k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 787 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 764 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Public Key Infrastructure Engineer

Role Posting Log in to save

As a Public Key Infrastructure Engineer, you will join the Identity and Access Management team to support large-scale projects focused on Zero Trust environments. You will collaborate with stakeholders and engineering teams to analyze identity lifecycles, articulate access requirements, and define enterprise identity records. Your daily responsibilities include designing, deploying, and supporting systems that manage credentials and verify user privileges for critical assets, including single sign-on and privileged access systems. The role requires expertise in Public Key Infrastructure, Active Directory Certificate Services, and certificate lifecycle management and automation. You will utilize knowledge of Linux systems, asymmetric cryptography, and certificate policies to solve security challenges. Preferred technical skills include experience with Keyfactor, Venafi, ACME, and SCEP processes. Candidates must possess an active TS/SCI clearance and have a background in implementing security best practices.

Skills

PKI Identity and Access Management (IAM) Active Directory Certificate Services Certificate Authority Linux Asymmetric Cryptography Keyfactor Venafi ACME SCEP Zero Trust Security+

What you'll do

  • Design, deploy, and support enterprise-class systems to verify user privileges and manage credentials.
  • Manage the full certificate lifecycle including issuance, renewal, and automation.
  • Implement and maintain Public Key Infrastructure (PKI) and Active Directory Certificate Services.
  • Analyze identity lifecycles to define enterprise records and articulate specific access requirements.
  • Deploy single sign-on and privileged access systems to secure critical assets.
  • Manage Certificate Authority design, setup, and daily operations.
  • Apply asymmetric cryptography concepts and Linux system knowledge to maintain security best practices.

What we're looking for

  • High school diploma or GED.
  • Active TS/SCI clearance and willingness to take a polygraph exam.
  • 3+ years of experience with Public Key Infrastructure (PKI) in cybersecurity.
  • Experience with Active Directory Certificate Services.
  • Experience with Certificate Authority design, setup, operations, and lifecycle management automation.
  • Knowledge of Linux systems and asymmetric cryptography concepts and applications.
  • Experience implementing and maintaining security best practices.
  • Experience with Keyfactor, Venafi, ACME/SCEP processes, or Security+ certification (preferred).

Related searches

More Public Key Infrastructure Engineer jobs Public Key Infrastructure Engineer jobs in Washington All jobs at Booz Allen Hamilton

More like this

Similar roles

Senior PKI Engineer

Booz Allen Hamilton

Laurel, MD +1 41 days ago $86,800–$198,000
PKI IAM Zero Trust Python Perl Red Hat Certificate System Dogtag PKI EJBCA Java AWS ActivClient Single Sign-On Cloud Migration Web Servers Application Servers
5+ yrs exp
Save

Senior PKI Engineer

Booz Allen Hamilton

Laurel, MD +1 6 days ago $86,800–$198,000
PKI IAM Zero Trust Python Perl Red Hat Certificate System Dogtag PKI EJBCA Java AWS ActivClient Single Sign-On Cloud Migration Web Servers Application Servers
5+ yrs exp
Save

Identity and Access Management Architect, Lead

Booz Allen Hamilton

Fort Meade, MD 24 days ago $99,000–$225,000
IAM Zero Trust Active Directory Entra ID LDAP SailPoint Okta Saviynt SIEM UEBA PKI SSO NIST SP 800-53 STIGs HSPD-12 Python REST JSON XML
7+ yrs exp
Save

Senior SailPoint Engineer

Booz Allen Hamilton

Scott AFB, IL 83 days ago $86,800–$198,000
SailPoint Identity and Access Management (IAM) Java SailPoint IIQ Active Directory Azure AD AWS LDAP ServiceNow Workday SAP Oracle CyberArk BeyondTrust Zero Trust NIST 800-63
Save

SailPoint Engineer

Booz Allen Hamilton

Scott AFB, IL 83 days ago $86,800–$198,000
SailPoint Identity and Access Management (IAM) Active Directory Azure AD LDAP AWS Azure ServiceNow Workday SAP Oracle CyberArk BeyondTrust Virtru NIST 800-63
Save

IAM Operations Lead

Booz Allen Hamilton

Reston, VA +2 39 days ago $99,000–$225,000
PKI Certificate Lifecycle Management Linux Asymmetric Cryptography Keyfactor Venafi ACME SCEP Scripting Automation
Save