PKI Engineer / Certificate Management Specialist

iQuasar, LLC; United States; Remote; USD 120.000 - 190.000; Vollzeit

Benefits dieser Stelle

401(k)

Dental insurance

Health insurance

Paid time off

Vision insurance

Zusammenfassung

iQuasar LLC has an exciting opportunity for a PKI Engineer / Certificate Management Specialist to join our growing team. The role supports USCIS PKI management and modernization, including device certificate lifecycle management, NPE certificate authority support, and automation of certificate request and approval processes.

The position is full-time and remote, focusing on implementing federal PKI policies, managing certificate issuance, rekey, revocation, and ensuring secure PIV-based

Qualifikationen

• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience with issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.

Aufgaben

• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.

Kenntnisse

PKI expertise

Certificate lifecycle management

PIV authentication

Federal PKI policy knowledge

Automation of certificate workflows

Tools

HashiCorp

Certbot

Let’s Encrypt

OAuth/OIDC

AWS EKS

Jobbeschreibung

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

iQuasar LLC has an exciting opportunity for a PKI Engineer / Certificate Management Specialist to join our growing team.The PKI Engineer will support USCIS PKI management and modernization, including device certificate lifecycle management, NPE certificate authority support, person-centric PKI, PIV-based certificate authentication, and automation of certificate request and approval processes. iQuasar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success.

We are seeking a PKI Engineer / Certificate Management Specialist for a contract position.

• Position: PKI Engineer / Certificate Management Specialist
• Position Type: Full-time-Remote

Role Specific Duties/ Role Responsibilities:

• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.

Required Qualifications:

• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required USCIS access.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.

Desired Skills and Certifications:

• Experience with DHS CA4, NPE CA, person-centric PKI, DHS 4300A, PKI interface specifications, or COPG.
• Experience with HSMs, HashiCorp, Certbot, Let’s Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
• Prior DHS, USCIS, or federal civilian PKI experience.
• Experience automating manual certificate workflows.
• Experience supporting Apple/mobile device certificates..

iQuasar LLC is a proud partner of the Military Spouse Employment Partnership (MSEP) and the Virginia Values Veterans (V3) Program, reflecting our strong commitment to supporting military spouses, veterans, and inclusive hiring practices. We are an Equal Opportunity Employer and do not discriminate based on race, religion, color, national origin, political affiliation, sex, sexual orientation, gender identity, age, marital/parental/veteran status, disability, genetic information, membership in an employee organization, retaliation, military service, non-merit factors, or any other characteristics protected by applicable law.

This is a remote position.