PKI & Cybersecurity Engineer — DoD TS Clearance

Eiden Systems Corporation; Ogden (UT); On-site; USD 120,000 - 180,000; Full time

Job summary

Eiden Systems Corporation (ESC) is seeking a PKI and Cyber Security Engineer to support enterprise PKI operations for the Defense Logistics Agency. The role requires hands-on experience with CA infrastructure, OCSP, certificate management, and cloud integration in DoD environments.

The engineer will ensure secure certificate services, high availability, vulnerability remediation, and compliance with STIGs, IAVM, NIST, and FIPS.

Qualifications

• Active Top Secret clearance required or eligible.

Responsibilities

• Engineer, implement, optimize, and sustain enterprise PKI infrastructure including CA servers and OCSP services.
• Configure and maintain PKI technologies such as AD CS, NDES, SCEP and certificate management solutions.
• Support PKI and OCSP integration with Microsoft Azure and AWS.
• Develop certificate issuance capabilities for SSL/TLS, device, code-signing certificates.
• Design highly available PKI infrastructure with disaster recovery capabilities.
• Perform PKI troubleshooting, root cause analysis, and security patching.
• Ensure compliance with DoD STIGs, IAVM, NIST, and FIPS requirements.
• Create and maintain SOPs, runbooks, COOPs, and key recovery documentation.
• Coordinate PKI projects with government stakeholders and external vendors.

Skills

Top Secret clearance

IAT Level II

Security communication

PKI engineering

Problem solving

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

AD CS

NDES

SCEP

PKI management tools

Azure

AWS

Job description

Eiden Systems Corporation (ESC) is seeking a PKI and Cyber Security Engineer to support enterprise PKI operations for the Defense Logistics Agency. The role requires hands-on experience with CA infrastructure, OCSP, certificate management, and cloud integration in DoD environments.

The engineer will ensure secure certificate services, high availability, vulnerability remediation, and compliance with STIGs, IAVM, NIST, and FIPS.