PKI Engineer and Cyber Security- Richmond

Eiden Systems Corporation; Richmond (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) plan with company match

Life insurance

Disability coverage

Job summary

Eiden Systems Consulting (ESC) seeks a PKI and Cyber Security Engineer to support enterprise PKI operations and cybersecurity initiatives for the DoD. You will engineer, implement, secure, and maintain enterprise PKI environments including CA, OCSP, and certificate management, with cloud integration into Azure and AWS.

You will work with government stakeholders and cross-functional teams to ensure secure certificate services, high availability, vulnerability remediation, and compliance with

Qualifications

• Top Secret clearance and willingness to maintain it.
• Degree in IT, CS, Cybersecurity, or related field preferred.
• IAT Level II certification (e.g., CISSP, Security+, MCSE) preferred.
• Hands-on experience with certificate services, lifecycle management, and OCSP.
• Experience with Windows Server environments (physical/virtual).
• Knowledge of cybersecurity, vulnerability remediation, hardening, and DoD/NIST/FIPS guidance.
• Ability to produce technical documentation and runbooks.
• Strong written and verbal communication with government customers.

Responsibilities

• Engineer, implement, and sustain enterprise PKI infrastructure including CA, OCSP, and related services.
• Configure AD CS, NDES, SCEP, and certificate management solutions.
• Support PKI/OCSP integration with Azure and AWS.
• Develop certificate issuance for SSL/TLS, device, code-signing, and NPE certificates.
• Integrate PKI with enterprise apps and web portals requiring certificate-based access.
• Design and maintain highly available PKI infrastructure with DR capabilities.
• Perform PKI troubleshooting, root cause analysis, and service restoration.
• Apply security patches and configuration changes to remediate vulnerabilities.
• Ensure compliance with DoD STIGs, IAVM, NIST, and FIPS requirements.
• Develop SOPs, runbooks, COOPs, and key recovery docs.
• Support enterprise key management and key ceremonies.
• Participate in security audits and compliance assessments.
• Coordinate projects with government stakeholders and vendors.
• Support PKI middleware configuration, testing, and upgrades.
• Contribute to PKI modernization and DoD PKI requirements.

Skills

Top Secret clearance

IAT Level II certification

Strong communication skills

Troubleshooting

Documentation

Education

Information Technology / CS / Cybersecurity degree preferred

Tools

AD CS

NDES

SCEP

OCSP infrastructure

Azure

AWS

Job description

Eiden Systems Consulting (ESC) is seeking a PKI and Cyber Security Engineer to support enterprise Public Key Infrastructure (PKI) operations and cybersecurity initiatives for the Defense Logistics Agency (DLA). The successful candidate will have hands‑on experience engineering, implementing, securing, and maintaining enterprise PKI environments, including Certificate Authority (CA) infrastructure, Online Certificate Status Protocol (OCSP) services, certificate management, and cloud integration.

This role supports critical enterprise systems and applications by ensuring secure certificate services, high availability, vulnerability remediation, and compliance with Department of Defense (DoD) security requirements. The candidate will work closely with technical teams, system administrators, vendors, and government stakeholders to troubleshoot complex issues, improve infrastructure resiliency, and support evolving enterprise security requirements.

Key Responsibilities

• Engineer, implement, optimize, and sustain enterprise PKI infrastructure, including Certificate Authority (CA) servers, OCSP responders and repeaters, and related services.
• Configure, deploy, and maintain PKI technologies and services, including Active Directory Certificate Services (AD CS), Network Device Enrollment Service (NDES), Simple Certificate Enrollment Protocol (SCEP), and certificate management solutions.
• Support PKI and OCSP integration with cloud environments, including Microsoft Azure and Amazon Web Services (AWS).
• Develop and maintain certificate issuance and management capabilities for SSL/TLS, non-person entity (NPE), device, code-signing, and other enterprise certificates.
• Integrate PKI services with enterprise applications, web portals, and systems requiring secure authentication and certificate-based access.
• Design, implement, and maintain highly available PKI infrastructure, including physical and virtual servers, repeaters, and disaster recovery capabilities.
• Perform PKI troubleshooting, root cause analysis, performance diagnostics, and service recovery to minimize operational disruptions.
• Apply security patches, upgrades, and configuration changes to remediate vulnerabilities and maintain secure system operations.
• Ensure compliance with applicable DoD security requirements, DISA Security Technical Implementation Guides (STIGs), Information Assurance Vulnerability Management (IAVM) requirements, NIST guidance, and Federal Information Processing Standards (FIPS).
• Develop and maintain technical documentation, standard operating procedures (SOPs), PKI runbooks, continuity of operations plans (COOPs), and key recovery documentation.
• Support enterprise key management and key ceremonies in accordance with multi-person integrity requirements.
• Participate in security audits, compliance assessments, and audit-readiness activities.
• Analyze security risks and recommend mitigation strategies, infrastructure improvements, and long-term security solutions.
• Coordinate technical projects and infrastructure changes with government stakeholders, system administrators, cybersecurity teams, and external vendors.
• Support PKI middleware configuration, testing, upgrades, and escalated technical issues.
• Contribute to PKI modernization initiatives and emerging DoD PKI requirements.

Required Qualifications

• Active Top Secret clearance
• A degree in Information Technology, Computer Science, Cybersecurity, or a related field is preferred. Relevant hands‑on experience and industry certifications may be considered in place of a degree
• IAT Level II certification: may include CISSP, CompTIA Security+, Microsoft Azure AA, Microsoft Azure SAE, Microsoft Certified Solutions Expert (MCSE): Cloud Platform and Infrastructure, Windows Server Hybrid Administrator Associate, AWS CCP:Amazon Web Services Certified Cloud Practitioner
• Hands‑on experience with certificate services, certificate issuance and life‑cycle management, and OCSP infrastructure.
• Experience supporting Windows Server environments, including physical and virtual infrastructure.
• Knowledge of cybersecurity principles, vulnerability remediation, security hardening, and enterprise security compliance.
• Experience troubleshooting complex infrastructure issues and performing root cause analysis.
• Ability to develop technical documentation, procedures, and infrastructure support plans.
• Strong written and verbal communication skills, with the ability to work effectively with government customers and cross‑functional technical teams.

Preferred Qualifications

• Experience supporting DoD or other federal government enterprise PKI environments.
• Demonstrated experience engineering, administering, and supporting enterprise PKI environments.
• Experience integrating PKI and OCSP services with Microsoft Azure and AWS environments.
• Has an understanding ofhow Microsoft Active Directory tiesinto Enterprise PKI
• Experience with NDES, SCEP, NPE certificates, SSL/TLS certificates, and code‑signing certificates.
• Knowledge of DISA STIGs, IAVM, NIST, FIPS, and other applicable federal and DoD cybersecurity requirements.
• Experience with PKI high availability, disaster recovery, continuity of operations, and enterprise key management.
• Experience with Splunk, Cribl, and enterprise log collection.
• Experience supporting vulnerability remediation, security audits, and compliance assessments.

Why ESC?

At Eiden Systems Consulting, you'll join a collaborative team supporting critical national security missions. We value technical excellence, innovation, and professional growth while providing opportunities to work on challenging engineering programs that make a real impact.

ESC offers a competitive compensation package that includes premium health, dental, and vision insurance, a 401(k) plan with company match, life insurance, short- and long-term disability coverage, and more. We also prioritize work‑life balance, supporting our team in maintaining a healthy blend of professional and personal well‑being.

PAY TRANSPARENCY NONDISCRIMINATION PROVISION

Eiden Systems Corporation (ESC) is an equal opportunity employer and is committed to creating an inclusive and respectful workplace. ESC does not discriminate against any employee or applicant based on age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any other classification protected by federal, state, or local law.

In accordance with 41 CFR 60‑1.35(c), ESC will not discharge or otherwise discriminate against employees or applicants for discussing, disclosing, or inquiring about their own pay or the pay of another employee or applicant. However, employees who have access to compensation information as part of their essential job functions may not disclose the pay of others to individuals who do not have authorized access—unless such disclosure is made (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or legal action (including those conducted by ESC), or (c) as otherwise required by law.

NO THIRD PARTIES