PKI Engineer

Soliel, LLC; Fort Meade, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Major medical, dental, and vision

401k with company matching

Job summary

Soliel, LLC is seeking a PKI Engineer to design, secure, and automate our enterprise-wide Public Key Infrastructure at Fort Meade. You will lead automated certificate lifecycles using ACME, manage CA hierarchies across Red Hat CS and EJBCA, and integrate with cloud environments while maintaining cryptographic security standards.

You will apply deep knowledge of X.509, SSL/TLS, HSM/KMS, and scripting in Bash, Perl or Python, collaborating with security, architecture, and development teams to

Qualifications

• Bachelor's degree required in CS/Engineering or equivalent.
• 5+ years of experience with X.509, SSL/TLS, and HSM/KMS.
• Experience configuring ACME clients/servers, SCEP, EST, and REST APIs.
• Scripting in Bash and Perl or Python.
• Strong documentation and collaboration skills.

Responsibilities

• Design, implement, and maintain automated certificate workflows with ACME and REST APIs.
• Administer enterprise CA hierarchies across platforms like Red Hat CS and EJBCA.
• Ensure compliance with DoW STIG, FIPS, and HSM integration.
• Develop scripts using Bash and Perl or Python to improve efficiency.
• Collaborate with security, architecture, and development teams on secure designs.
• Document configurations, procedures, and troubleshooting guides.
• Participate in upgrades, migrations, and continuous improvement initiatives.

Skills

X.509 certificates

SSL/TLS

HSM/KMS integration

ACME protocol

REST APIs

Bash scripting

Python

Perl

Documentation

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Red Hat CS

EJBCA

SCEP

EST

Ansible

Red Hat Satellite

Job description

ABOUT US:
Soliel is an innovative, premium engineering company specializing in providing Enterprise Architecture, Network Design, Engineering, and Operations Support, Software Design and Development, Data Center Design, Deployment and Migration, and Systems Engineering services for both public and private sectors. Our Federal systems integration team manages the complexity inherent with technology change, from requirements planning to architecture, testing to deployment, and beyond. We also offer a complete range of industry-leading services, including architecture, systems development, information assurance, solution and platform integration, and program management, functional, and testing services. Over the years, Soliel's team of technical experts has consistently delivered outstanding innovative solutions and services that meet or exceed customer expectations and satisfaction.

LOCATION: Fort Meade, MD/REMOTE

START DATE: Immediate
CLEARANCE: Secret

JOB DESCRIPTION:
Soliel is seeking to hire a PKI Engineer. This position will design, secure, and automate our enterprise-wide Public Key Infrastructure. In this role, you will lead the implementation of automated certificate lifecycles leveraging the ACME protocol to eliminate manual renewals and reduce operational risk. You will also manage robust Certificate Authority (CA) hierarchies, integrate services with cloud environments, and maintain strict cryptographic security compliance. This position requires deep technical expertise in asymmetric cryptography, X.509 standards, and automated configuration management.

KEY RESPONSIBILITIES:

• Design, implement, and maintain automated certificate issuance, renewal, and revocation workflows using the ACME protocol and RESTful APIs.
• Administer enterprise CA hierarchies (Root, Issuing, and Subordinate CAs) across platforms like Red Hat CS or EJBCA
• Ensure compliance with security standards such as DoW STIG, FIPS alongside Hardware Security Module (HSM) integration.
• Develop and maintain scripts and tools using Bash and Perl or Python to support operational efficiency.
• Collaborate with security, architecture, and development teams to ensure secure system and application designs.
• Document system configurations, operational procedures, and troubleshooting guides.
• Participate in system upgrades, migrations, and continuous improvement initiatives.

REQUIRED SKILLS:

• Bachelor's degree in Computer Science, Engineering, or equivalent experience.
• Five (5) years of more of knowledge and experience leveraging X.509 certificates, SSL/TLS, asymmetric cryptography, and HSM/KMS integration.
• Hands-on experience configuring ACME clients/servers, SCEP, EST, and REST APIs.
• Strong scripting experience using Bash and Perl or Python
• Excellent written and verbal skills for documentation and collaboration.

Preferred Skills:

• Strong experience with configuration management and automation tools, Ansible and Red Hat Satellite
• Demonstrated ability to troubleshoot complex system and application issues across multiple layers of the stack.
• LDAP experience, specifically non-Active Directory LDAP implementations
• Experience with PostgreSQL, MariaDB database platforms
• Cryptographic engineering experience, including:
  • Secure key management
  • Cryptographic protocol implementation or integration

COMPENSATION:

$165,000 plus (flexible based on experience)

Major medical, dental and vision

401k and company matching

EEO/ AA/ NON-DISCRIMINATION STATEMENT: Soliel, LLC is an Equal Opportunity/Affirmative Action/Non-Discriminatory Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity, age, physical or mental disability, or covered veterans. To learn more, please visit www.solielcom.com