PKI Architect: Secure Cloud, Zero Trust & IAM

Capital Technology Group; United States; Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote Work

Medical Coverage

401(k)

Job summary

Capital Technology Group seeks a PKI Architect to design and modernize enterprise PKI and identity trust services for federal systems. This senior role requires deep cryptographic expertise, IAM, and scalable infrastructure across highly secure environments.

You will lead cloud-native deployments on AWS/Azure, automate infrastructure with Ansible and CI/CD, and collaborate with security and engineering teams to implement DevSecOps while aligning with NIST, FIPS, and Zero Trust principles.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field (or equivalent experience)
• 4+ years of professional experience in PKI architecting, cybersecurity engineering, IAM, infrastructure/security architecture, or enterprise platform engineering
• Experience designing and supporting PKI solutions in FICAM and Federal PKI (FPKI) environments
• Experience with X.509 certificate lifecycle management, automation, and policy development
• Knowledge of X.509 certificate policies and CA/Browser Forum standards
• Experience implementing certificate automation using ACME
• Experience with Hardware Security Modules (HSMs) and cryptographic key management
• Familiarity with Post-Quantum Cryptography (PQC) concepts and migration strategies
• Experience with PKI platforms including DigiCert, Entrust, Microsoft AD CS, and Let’s Encrypt
• Experience supporting CAC/PIV smart cards, server, code-signing, and S/MIME certificates, including trust chains
• Experience with AWS and/or Azure cloud platforms
• Familiarity with DevSecOps, CI/CD pipelines, and GitHub Enterprise
• Understanding of NIST, FISMA, FIPS, and Zero Trust principles

Responsibilities

• Design, implement, and evolve PKI architectures that enable secure authentication and Zero Trust initiatives
• Build and support cloud-native solutions across AWS and Azure environments
• Automate infrastructure, deployments, and operational processes using Ansible and CI/CD pipelines
• Partner with security and engineering teams to implement DevSecOps practices and secure software delivery
• Support compliance initiatives aligned with NIST, FISMA, FIPS, and Zero Trust Architecture principles
• Monitor, troubleshoot, and optimize application and platform performance using security and observability tools

Job description

Capital Technology Group seeks a PKI Architect to design and modernize enterprise PKI and identity trust services for federal systems. This senior role requires deep cryptographic expertise, IAM, and scalable infrastructure across highly secure environments.

You will lead cloud-native deployments on AWS/Azure, automate infrastructure with Ansible and CI/CD, and collaborate with security and engineering teams to implement DevSecOps while aligning with NIST, FIPS, and Zero Trust principles.