PKI Engineer – Enterprise & Cloud Certificate Management

asmexternalcareersite; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

asmexternalcareersite in the United States is seeking a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin secure authentication, encryption, and digital signatures across mission-critical systems.

The role owns certificate lifecycle management, enforcing PKI policies, and collaborating with security, infrastructure, and cloud teams to ensure audit-ready operations in a federal IT environment.

Qualifications

• Bachelor's degree or equivalent in IT, CS, cybersecurity or related field.
• 4–7 years in security engineering or infrastructure with PKI focus.
• Deep PKI knowledge: CA hierarchies, trust models, OCSP/CRL.
• TLS, S/MIME, and code signing in enterprise environments.
• Hands-on with PKI platforms and PKI tooling integration.
• Strong analytical, problem-solving, and clear communication.
• Ability to obtain SECRET clearance; U.S. citizenship required.

Responsibilities

• Architect, deploy, and operate PKI infrastructures across on‑premises and cloud environments.
• Design and manage certificate lifecycle processes for large fleets.
• Integrate PKI with identity platforms, VPN/Wi‑Fi, TLS termination, and code signing.
• Administer PKI platforms with backup, monitoring, and high availability.
• Define PKI policies and runbooks aligned with security requirements.
• Lead troubleshooting of PKI incidents, diagnostics, and remediation.
• Provide guidance on cryptographic standards and secure PKI usage.

Skills

Bachelor's degree in IT, CS, Cybersecu

4–7 years in security engineering

PKI architectures & trust models

TLS, S/MIME, code signing

PKI platforms and tooling

analytical, problem solving, comms

SECRET clearance eligibility

Education

Bachelor’s degree in IT, CS, Cybersecurity, or related field

Tools

AD CS

PKI tooling

Job description

asmexternalcareersite in the United States is seeking a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin secure authentication, encryption, and digital signatures across mission-critical systems.

The role owns certificate lifecycle management, enforcing PKI policies, and collaborating with security, infrastructure, and cloud teams to ensure audit-ready operations in a federal IT environment.