Hybrid Identity Federation & PKI Engineer — ZTA

Viateq Corporation; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan

Paid time off

11 paid federal holidays

Flexible spending accounts

Professional development reimbursement

Job summary

VIATEQ Corporation is seeking an Identity Federation & PKI Engineer in Washington, DC. The hybrid role supports government contracting with responsibilities spanning SSO design, PKI management, and cross-domain identity integration across Ping Identity, Okta, and Entra.

The candidate will implement passwordless and phishing-resistant authentication using FIDO2/WebAuthn, manage PKI lifecycles including CAs, and ensure compliance with federal standards. A Public Trust eligibility is required.

Qualifications

• Bachelor’s degree in a relevant field and 6–10+ years of IAM/security engineering experience.
• Minimum of 4 years configuring federated identity solutions and enterprise PKI.
• Strong hands-on with Ping Identity, Okta, Entra, and cloud identity services.

Responsibilities

• Design, build, and maintain enterprise federation connections (SAML, OAuth 2.0, OpenID Connect) across environments and SaaS products.
• Configure, optimize, and troubleshoot identity topologies using PingFederate, PingAccess, Okta, and Entra.
• Collaborate with Entra and Okta leads to implement secure API authorization and token attributes/claims.
• Support passwordless and phishing-resistant authentication using FIDO2/WebAuthn.
• Manage PKI lifecycles including CAs, registration authorities, and revocation (CRLs/OCSP).
• Integrate federal PKI with cloud IdPs for derived credentials and MFA.
• Maintain HSMs and PKI software in line with FIPS 140-3 and federal mandates.
• Troubleshoot certificate validation, trust chains, and cross-realm trust.
• Understand Azure Key Vault and post-quantum cryptography concepts.
• Document architectures, security controls, and deployment cookbooks.

Skills

Ping Identity Suite

Okta

Microsoft Entra

OIDC

OAuth 2.0

SAML 2.0

FIDO/WebAuthn

PowerShell

Python

Bash

Postman

ADCS

PKI

Education

Bachelor’s Degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or a related field

Tools

DigiCert

Entrust

ADCS

Job description

VIATEQ Corporation is seeking an Identity Federation & PKI Engineer in Washington, DC. The hybrid role supports government contracting with responsibilities spanning SSO design, PKI management, and cross-domain identity integration across Ping Identity, Okta, and Entra.

The candidate will implement passwordless and phishing-resistant authentication using FIDO2/WebAuthn, manage PKI lifecycles including CAs, and ensure compliance with federal standards. A Public Trust eligibility is required.