PKI Engineer: Certificate Lifecycle & Trust Architect

ASM Research, An Accenture Federal Services Company; Annapolis (MD); On-site; USD 125,000 - 137,000; Full time

Job summary

ASM Research, an Accenture Federal Services company, is seeking a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin secure authentication and digital signatures for mission-critical systems. The role owns certificate lifecycle management and automation for user, device, application identities.

Working in a federal IT environment, the engineer will integrate PKI with identity platforms, network security controls, and cloud services, developing policies and

Qualifications

• Bachelor's degree or equivalent experience in IT or cybersecurity.
• 4–7 years in security engineering or infrastructure roles focusing on PKI and certificate management.
• Deep understanding of PKI architectures, CA hierarchies, trust models, OCSP/CRL.
• Strong knowledge of TLS, S/MIME, and code signing in enterprise settings.
• Hands-on experience with enterprise PKI platforms and integration with identity/network services.
• Ability to obtain and maintain SECRET clearance, with U.S. citizenship.

Responsibilities

• Architect, deploy, and operate PKI infrastructures across on-prem and cloud.
• Design scalable certificate lifecycle processes for endpoints and services.
• Integrate PKI with identity platforms, VPN/Wi-Fi auth, TLS termination.
• Implement PKI tooling (AD CS, cloud PKI, and HSM-backed stores) with HA.
• Define certificate policies and runbooks aligned with security requirements.
• Lead PKI incident troubleshooting and durable remediation.
• Provide guidance on cryptographic standards and secure PKI usage.

Skills

PKI architectures

TLS/S/MIME

Code signing

Identity platforms

Certificate lifecycle

Security clearance

HSM integration

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

AD CS

HSM-backed key stores

cloud PKI

machine identity management

Job description

ASM Research, an Accenture Federal Services company, is seeking a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin secure authentication and digital signatures for mission-critical systems. The role owns certificate lifecycle management and automation for user, device, application identities.

Working in a federal IT environment, the engineer will integrate PKI with identity platforms, network security controls, and cloud services, developing policies and