PKI Engineer

Take2 Consulting, LLC; Fort Meade (MD); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Take2 Consulting, LLC seeks a PKI Engineer to design, implement, and sustain PKI capabilities across DoD environments. You will work hands-on with EJBCA and other enterprise PKI platforms, supporting deployments in Mission Partner Environment locations and SIPR-connected networks.

The role requires knowledge of certificate lifecycle, trust chains, and PKI troubleshooting, with travel up to ~25% and hybrid onsite work at program locations.

Qualifications

• Hands-on PKI engineering experience in enterprise environments.
• Strong understanding of certificate authorities, digital certificates, and PKI troubleshooting.
• Experience supporting DoD/DISA or similarly controlled environments.

Responsibilities

• Design, implement, configure, and support enterprise PKI capabilities in secure DoD environments.
• Support certificate authority and registration authority services, certificate lifecycle operations, trust chains, revocation, and related PKI services.
• Configure, troubleshoot, and maintain EJBCA or comparable enterprise PKI/CA platforms.
• Support PKI deployments and integrations across Mission Partner Environment locations and classified/SIPR-connected environments.
• Troubleshoot certificate enrollment, authentication, trust, interoperability, and deployment issues.
• Coordinate with engineering, cybersecurity, network, systems, and site teams during implementation and operational support.
• Develop and maintain technical documentation, implementation procedures, configuration guidance, and deployment artifacts.
• Provide onsite engineering support approximately 2-3 days per week and travel to deployment locations as required.

Skills

PKI engineering

EJBCA

Certificate lifecycle management

DoD environments

Hybrid onsite work

Job description

Take2 Consulting is seeking PKI Engineers to support a recently awarded Department of Defense effort delivering Public Key Infrastructure capabilities across Mission Partner Environment (MPE) locations. This is a hands-on engineering role supporting PKI implementation, integration, deployment, and ongoing operations in secure DoD/DISA environments. The team is expanding to add engineering depth as deployments scale across multiple sites.

Experience with EJBCA is highly desirable because it is the PKI technology supporting the capability. Candidates with strong traditional PKI engineering experience and comparable enterprise certificate authority platforms are also encouraged to apply.

Key Responsibilities

• Design, implement, configure, and support enterprise PKI capabilities in secure DoD environments.
• Support certificate authority and registration authority services, certificate lifecycle operations, trust chains, revocation, and related PKI services.
• Configure, troubleshoot, and maintain EJBCA or comparable enterprise PKI/CA platforms.
• Support PKI deployments and integrations across Mission Partner Environment locations and classified/SIPR-connected environments.
• Troubleshoot certificate enrollment, authentication, trust, interoperability, and deployment issues.
• Coordinate with engineering, cybersecurity, network, systems, and site teams during implementation and operational support.
• Develop and maintain technical documentation, implementation procedures, configuration guidance, and deployment artifacts.
• Provide onsite engineering support approximately 2-3 days per week and travel to deployment locations as required.

Required Qualifications

• Hands-on experience engineering, implementing, or supporting Public Key Infrastructure (PKI) environments.
• Strong understanding of certificate authorities, digital certificates, certificate lifecycle management, trust relationships, revocation, and PKI troubleshooting.
• Experience supporting enterprise infrastructure in DoD, DISA, federal, or similarly controlled environments.
• Ability to support hybrid onsite work at one of the listed program locations.
• Ability to travel approximately 25%, including potential international deployment support.
• Active DoD clearance appropriate for the classified environment supported by the program.

Highly Desired

• Direct EJBCA administration, engineering, implementation, or integration experience.
• Experience delivering PKI capabilities within Mission Partner Environment (MPE) architectures.
• Experience with DISA environments, SIPR-connected infrastructure, or geographically distributed DoD deployments.