PKI Engineer

Capital Technology Group; Washington (District of Columbia); Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Remote Work

Medical, Dental, Vision

401(k) with 4% matching

Liberal PTO

Continuing Education budget

Wellness Budget

Bonus incentives

Life Insurance

Short/Long Term Disability

Employee Assistance Program

Job summary

Capital Technology Group is seeking an experienced PKI Engineer to design and operate enterprise PKI services supporting mission-critical federal systems. The role involves managing HSMs, building CI/CD pipelines, and administering cloud infrastructure on AWS/Azure.

The ideal candidate should have 4+ years in PKI/security engineering, strong IAM experience, and hands-on PKI platform knowledge (Entrust, Digicert, Venafi, Let's Encrypt).

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field (or equivalent experience)
• 4+ years of professional experience in PKI engineering, cybersecurity engineering, identity and access management (IAM), infrastructure/security engineering, or enterprise platform engineering
• Experience with PKI platforms (Entrust, Digicert, Venafi, Let's Encrypt).
• Experience with Hardware Security Modules (HSMs).
• Experience with cloud platforms such as AWS and/or Azure.

Responsibilities

• Implement, and maintain PKI architecture according to technical requirements and guidance of PKI SME.
• Build and maintain CI/CD pipelines using Jenkins and/or Harness.
• Automate provisioning and configuration of Windows and Linux infrastructure supporting PKI.
• Manage containerized workloads using Docker, Helm, Kubernetes, and EKS.
• Administer AWS infrastructure including EC2 and RDS.
• Provide user support for certificate lifecycle.

Skills

PKI engineering

Cloud infrastructure

Security engineering

IAM

Cross-team collaboration

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or related field

Tools

Entrust

Digicert

Venafi

Let's Encrypt

HSMs

AWS

Azure

Docker

Kubernetes

Helm

EKS

Jenkins

Harness

Job description

Capital Technology Group provides expert consulting services software development, digital transformation, human-centered design, data analytics and visualization, and cybersecurity.

Our multidisciplinary teams use agile methodologies to rapidly and incrementally deliver value in close collaboration with our clients. For over a decade, we have been trusted by both federal and commercial clients to solve complex, mission-critical business challenges. The quality of our work has been recognized by our partners and peers through our inclusion in the Digital Services Coalition, a group of forward-thinking firms recognized for excellence in delivering IT services.

Client Requirements:

Applicants MUST BE US Citizens and be able to obtain Public Trust clearance

The CTG Experience

At Capital Technology Group (CTG), our teams are passionate about modernizing how the federal government delivers software. We partner with federal agencies to build secure, scalable, and mission-driven solutions that make a meaningful impact on millions of people. Recognized by The Washington Post as a Top Workplace in 2025 and 2026. CTG fosters a culture rooted in our core values. Our values guide how we work together and support one another, creating an environment where employees feel trusted, empowered, and encouraged to grow both personally and professionally.

About the Role

CTG is seeking a PKI Engineer to implement and maintain enterprise Public Key Infrastructure (PKI) services supporting mission-critical federal systems. This role is ideal for an engineer with expertise in PKI platforms and managing Hardware Security Modules across complex, highly secure environments.

You Will Get To

• Implement, and maintain PKI architecture according to technical requirements and guidance of PKI SME.
• Build and maintain CI/CD pipelines using Jenkins and/or Harness.
• Automate provisioning and configuration of Windows and Linux infrastructure supporting PKI.
• Manage containerized workloads using Docker, Helm, Kubernetes, and EKS.
• Administer AWS infrastructure including EC2 and RDS.
• Provide user support for certificate lifecycle.

Who You Are

• A collaborative engineer who enjoys solving complex technical and security challenges.
• Passionate about building scalable, secure, and reliable cloud-based solutions.
• Comfortable working across application development, cloud infrastructure, identity, and security domains.
• Skilled at balancing technical innovation with operational excellence and compliance requirements.
• An effective communicator who can work with cross-functional teams and stakeholders.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field (or equivalent experience)
• 4+ years of professional experience in PKI engineering, cybersecurity engineering, identity and access management (IAM), infrastructure/security engineering, or enterprise platform engineering
• Experience with PKI platforms (Entrust, Digicert, Venafi, Let's Encrypt).
• Experience with Hardware Security Modules (HSMs).
• Experience with cloud platforms such as AWS and/or Azure.

Nice to Have

• Experience with Microsoft Certificate Services.
• Experience with PKI/certificate management products..
• Familiarity with PIV authentication and identity governance solutions.
• Experience supporting highly regulated environments, including federal or public sector organizations.
• Relevant cloud, security, or architecture certifications.

Client Requirements

• Applicants must be U.S. Citizens
• Ability to obtain a Public Trust clearance

Salary

We are committed to offering a competitive salary for this position, with an estimated range of $100,000 to $130,000 annually. Please note that this range is intended to provide a general idea of what to expect. The final offer may vary based on experience, skills, and other factors.

Full Time Employee Benefits

• Remote Work (Hybrid roles will be specified in the job post)
• Competitive Compensation Package
• Medical, Dental, and Vision
• Life Insurance, Short/Long Term Disability
• Employee Assistance Program
• 401(k) with 4% matching
• Liberal PTO vacation policy
• Generous Annual Continuing Education
• Annual Wellness Budget
• Bonus Incentive Programs (Employee referrals and performance-based rewards)

Thanks for your interest in Capital Technology Group!

Capital Technology Group is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.