PKI Engineer: Automated Certificate Lifecycle (Remote)

Soliel, LLC; Fort Meade, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Major medical, dental, and vision

401k with company matching

Job summary

Soliel, LLC is seeking a PKI Engineer to design, secure, and automate our enterprise-wide Public Key Infrastructure at Fort Meade. You will lead automated certificate lifecycles using ACME, manage CA hierarchies across Red Hat CS and EJBCA, and integrate with cloud environments while maintaining cryptographic security standards.

You will apply deep knowledge of X.509, SSL/TLS, HSM/KMS, and scripting in Bash, Perl or Python, collaborating with security, architecture, and development teams to

Qualifications

• Bachelor's degree required in CS/Engineering or equivalent.
• 5+ years of experience with X.509, SSL/TLS, and HSM/KMS.
• Experience configuring ACME clients/servers, SCEP, EST, and REST APIs.
• Scripting in Bash and Perl or Python.
• Strong documentation and collaboration skills.

Responsibilities

• Design, implement, and maintain automated certificate workflows with ACME and REST APIs.
• Administer enterprise CA hierarchies across platforms like Red Hat CS and EJBCA.
• Ensure compliance with DoW STIG, FIPS, and HSM integration.
• Develop scripts using Bash and Perl or Python to improve efficiency.
• Collaborate with security, architecture, and development teams on secure designs.
• Document configurations, procedures, and troubleshooting guides.
• Participate in upgrades, migrations, and continuous improvement initiatives.

Skills

X.509 certificates

SSL/TLS

HSM/KMS integration

ACME protocol

REST APIs

Bash scripting

Python

Perl

Documentation

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Red Hat CS

EJBCA

SCEP

EST

Ansible

Red Hat Satellite

Job description

Soliel, LLC is seeking a PKI Engineer to design, secure, and automate our enterprise-wide Public Key Infrastructure at Fort Meade. You will lead automated certificate lifecycles using ACME, manage CA hierarchies across Red Hat CS and EJBCA, and integrate with cloud environments while maintaining cryptographic security standards.

You will apply deep knowledge of X.509, SSL/TLS, HSM/KMS, and scripting in Bash, Perl or Python, collaborating with security, architecture, and development teams to