Network Security Engineer - PKI

guidepointsecurity; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work option

Security clearance eligible

Medical plan options

Paid holidays & PTO

Phone/internet allowance

Job summary

GuidePoint Security is seeking a Network Security Engineer to lead PKI operations in a federal environment. The role combines hands-on troubleshooting, automation development, and team supervision to ensure secure certificate management across the application portfolio.

The position emphasizes cutting-edge PKI practices, AI-driven workflow enhancements, and close collaboration with IT customers, developers, and administrators.

Qualifications

• Strong PKI knowledge including CA administration and AD CS monitoring.
• Proficiency in PowerShell and REST API integration.
• Experience with certificate management platforms (Venafi or CyberArk TPP) and MS CA.
• Infra background in IT/server admin, networking, LDAP/AD, Unix/Linux, virtualization.
• Ability to troubleshoot certificate issues and drive automation/AI initiatives.
• Awareness of post-quantum cryptography concepts and strong communication.

Responsibilities

• Lead and supervise PKI team; provide direction and requirements.
• Investigate certificate issues and implement sustainable solutions.
• Drive certificate automation using Venafi or CyberArk TPP; explore AI opportunities.
• Produce reports and runbooks leveraging AI and automation tooling.
• Communicate with IT customers, developers, and admins across stakeholders.

Skills

PKI

Certificate Authority

PowerShell

REST API

SCEP

AD CS

Venafi

CyberArk

HSMs

Automation

AI workflows

Post-quantum

Communication

Tools

Venafi

CyberArk TPP

Microsoft Certificate Authority

HSMs

Job description

Role overview

The Network Security Engineer will support certificate lifecycle operations across a federal customer's application portfolio, guiding stakeholders on Public Key Infrastructure practices while delivering responsive service. This is a hands‑on technical lead role that combines troubleshooting, automation development, and team supervision in a security‑focused federal environment.

Responsibilities

• Lead and supervise the PKI team, providing technical direction, project requirements, and strategic guidance for complex and critical applications.
• Investigate complex certificate and PKI issues, recommend improvements, and implement solutions that ensure sustainable operations.
• Drive certificate automation initiatives using Venafi or CyberArk TPP, identifying opportunities to introduce AI into recurring workflows.
• Produce reports, documentation, and runbooks leveraging AI and other automation tooling.
• Communicate effectively with IT customers, developers, and system administrators across multiple stakeholder groups.

Requirements

• Strong understanding of Public Key Infrastructure, including Certificate Authority administration, Certificate Enrollment Web Service and Policy Web Service, and Active Directory Certificate Services monitoring.
• Proficiency in PowerShell scripting and familiarity with REST API integration, SCEP, and Microsoft AD auto‑enrollment.
• Hands‑on experience with certificate management platforms such as Venafi or CyberArk TPP, Microsoft Certificate Authority, and Hardware Security Modules.
• Infrastructure background in one or more areas: IT or server administration, networking, Active Directory or LDAP, Unix or Linux, virtualization, or access control.
• Demonstrated ability to troubleshoot digital certificate issues and an interest in advancing automation and AI‑driven approaches.
• Awareness of post‑quantum cryptography concepts and strong written and verbal communication skills.

Nice to have

• Familiarity with VCERT, Portable Git, Ansible, and Visual Studio Code.
• Experience with ServiceNow or comparable change, incident, and problem management tooling.
• Background in TLS/SSL‑dependent platforms such as F5, NetScaler, IIS, Apache, WebLogic, or WebSphere.
• Server virtualization experience with VMware or Hyper‑V, plus database administration on MSSQL.
• Relevant certifications such as A+, Network+, Security+, Venafi or CyberArk administration, CCENT, or CCNA.

Benefits and work setup

• Remote position with candidates located in specific metro areas; occasional on‑site work may be required given the federal context.
• Eligibility for security clearance and a background investigation is required for the role.
• Medical plan options including a zero‑deductible PPO and a high‑deductible plan with health savings account contributions, plus dental coverage.
• Twelve corporate holidays, a flexible time off program, mobile phone and home internet allowance, and access to a retirement plan after an initial waiting period.
• Business casual dress expectations and sedentary work with extended computer use.