PKI Engineer

Apex Systems; McLean (VA); Remote; USD 120,000 - 170,000; Full time

Job summary

Apex Systems seeks a Senior PKI Security Engineer to provide operational, engineering, and project support for an enterprise PKI environment. You will lead PKI operations, certificate lifecycle management, and encryption strategies while coordinating with a geographically dispersed team in a remote Eastern Time zone.

The role emphasizes expert PKI, CA management, and incident resolution, with a focus on automation and DevOps. A Bachelor’s degree and PKI experience are preferred.

Qualifications

• 4+ years of Information Technology experience
• 2+ years of PKI experience
• Experience with public Certificate Authorities (Digicert, Sectigo)

Responsibilities

• Manage issuance and lifecycle of CA certificates.
• Register and manage domains and validation processes.
• Troubleshoot and address customer questions and high-severity issues.
• Monitor PKI and certificate incident queues; resolve issues.
• Create, review, and implement changes to PKI environment.
• Lead PKI initiatives for disaster recovery exercises.
• Analyze PKI architecture to identify operational improvements.
• Apply DevOps practices to automation and daily workflows.

Skills

PKI expertise

Public Key Infrastructure

DevOps practices

Python scripting

UNIX experience

Team leadership

AWS Certification

ITIL knowledge

Digicert CertCentral

Sectigo familiarity

Education

Bachelor's degree in Computer Science/Information Systems/Engineering

Tools

Digicert CertCentral

Job description

Job# 3057480

Job Description

Senior PKI Security Engineer within the Cyber organization who will be responsible for providing operational, engineering, and project support for an enterprise PKI environment.

The Senior PKI Security Engineer is considered the expert in the operations of PKI, Certificates, and Encryption and should have expert-level experience supporting large-scale and highly complex environments. This role will also require the ability to lead and coordinate efforts among the team. Individuals must be self-motivated and able to work well in a geographically dispersed, virtual team environment.

Location

remote working ET zone

Contract

through 5/14/2027

Primary Responsibilities

Operations & Support

• Manage the internal process for the issuance and lifecycle management of public Certificate Authority (CA) certificates.
• Register and manage domains and associated validation processes.
• Assist with troubleshooting, resolving complex or high-severity technical issues, and directly addressing customer questions.
• Monitor the PKI and Certificate incident queue and resolve all levels of issues.
• Create, review, approve, and implement changes to the PKI and Certificate environment.
• Act as the PKI and Certificate lead for periodic disaster recovery exercises.

Engineering & Strategy

• Analysis, design, and implementation of Public Key Infrastructure (PKI), certificate, and security solutions.
• Analyze the current PKI and Certificate environment to identify both technical and operational challenges and develop solutions for improvement.
• Analyze data and identify trends to facilitate root cause analysis and identify opportunities for service improvement.
• Participate in capacity planning, performance monitoring, and maintenance to ensure high availability and proactively identify opportunities for service improvement.
• Apply a strong understanding of DevOps principles to daily workflows and automation efforts.

Basic Qualifications

• High School Diploma, GED, or equivalent certification
• At least 4 years of Information Technology experience
• At least 2 years of experience with Public Key Infrastructure (PKI)
• Experience working with public Certificate Authorities, specifically Digicert and Sectigo

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Systems, or Engineering
• Knowledge of or hands‑on experience with Digicert CertCentral
• Understanding of the Information Technology Infrastructure Library (ITIL) principles
• Experience leading technical teams or leading projects
• AWS Certification
• Experience in Python or other programming or scripting languages
• 3+ years of PKI Experience
• Experience in PKI certificate and security technical experience that includes the operational support and implementation of large‑scale, enterprise‑level solutions
• 2+ years UNIX experience

Benefits Overview

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.

Equal Opportunity and Non-Discrimination

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

ADA Accommodation

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

Transparency in Coverage

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.