PKI Engineer - Certificate Lifecycle & Identity Security

ASM Research, An Accenture Federal Services Company; Juneau (AK); On-site; USD 125,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin secure authentication, encryption, and digital signatures for mission-critical systems. You will own lifecycle management across user, device, application, and service identities.

In a federal IT environment, you will integrate PKI with identity platforms, VPN/Wi-Fi, TLS, secure email, and code signing.

Qualifications

• Bachelor’s degree or equivalent experience.
• 4–7 years in security engineering or infrastructure with PKI focus.
• Deep PKI architecture knowledge and certificate lifecycle controls.
• Strong TLS/S/MIME and code signing knowledge.
• Hands-on PKI platform experience and identity/network integrations.
• Ability to obtain and maintain a SECRET clearance (US citizenship).

Responsibilities

• Architect, deploy, and operate PKI infrastructures with CA/RA and OCSP/CRL services.
• Design scalable certificate lifecycle processes for endpoints, apps, and services.
• Integrate PKI with identity platforms, VPN/Wi-Fi, TLS termination, and secure email.
• Implement and administer PKI tooling (AD CS, cloud PKI, HSM-backed stores) with HA.
• Define certificate policies and runbooks aligned to security requirements.
• Lead troubleshooting of PKI incidents and perform durable remediation.
• Provide guidance on cryptographic standards and secure PKI usage patterns.

Skills

PKI architectures

TLS/S/MIME/code signing

PKI tooling

Analytical skills

Communication

Security clearance

Education

Bachelor’s degree in IT/CS/Cybersecurity

Tools

AD CS

HSM-backed key stores

Cloud PKI

Machine identity management

Job description

ASM Research, An Accenture Federal Services Company, seeks a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin secure authentication, encryption, and digital signatures for mission-critical systems. You will own lifecycle management across user, device, application, and service identities.

In a federal IT environment, you will integrate PKI with identity platforms, VPN/Wi-Fi, TLS, secure email, and code signing.