PKI Engineer — Automated CA & HSM Security (Remote)

Soliel-LLC; Fort Meade (MD); Hybrid; USD 150,000 - 195,000; Full time

Benefits offered by this job

Major medical

Dental insurance

Vision insurance

401k with company matching

Job summary

Soliel, LLC is seeking a PKI Engineer to design, secure, and automate enterprise PKI. You will lead automated certificate lifecycles via ACME, manage CA hierarchies, and integrate with cloud environments while ensuring cryptographic security compliance.

The role requires deep experience with X.509, SSL/TLS, and HSM/KMS integration, plus scripting in Bash, Python, or Perl. Remote options exist from Fort Meade, MD, with competitive compensation.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or equivalent experience.
• 5+ years of knowledge and experience leveraging X.509 certificates, SSL/TLS, asymmetric cryptography, and HSM/KMS integration.
• Hands-on experience configuring ACME clients/servers, SCEP, EST, and REST APIs.
• Strong scripting experience using Bash and Perl or Python.

Responsibilities

• Design, implement, and maintain automated certificate issuance, renewal, and revocation workflows using the ACME protocol and RESTful APIs.
• Administer enterprise CA hierarchies (Root, Issuing, and Subordinate CAs) across platforms like Red Hat CS or EJBCA
• Ensure compliance with security standards such as DoW STIG, FIPS alongside HSM integration.
• Develop and maintain scripts and tools using Bash and Perl or Python to support operational efficiency.
• Collaborate with security, architecture, and development teams to ensure secure system and application designs.
• Document system configurations, operational procedures, and troubleshooting guides.
• Participate in system upgrades, migrations, and continuous improvement initiatives.

Skills

X.509 certificates

SSL/TLS

Asymmetric cryptography

HSM/KMS integration

Education

Bachelor's degree in CS/Engineering

Tools

ACME protocols

SCEP

EST

REST APIs

Bash scripting

Perl

Python

Job description

Soliel, LLC is seeking a PKI Engineer to design, secure, and automate enterprise PKI. You will lead automated certificate lifecycles via ACME, manage CA hierarchies, and integrate with cloud environments while ensuring cryptographic security compliance.

The role requires deep experience with X.509, SSL/TLS, and HSM/KMS integration, plus scripting in Bash, Python, or Perl. Remote options exist from Fort Meade, MD, with competitive compensation.