PKI Engineer — Enterprise Security & Certificate Lifecycle

ASM Research, An Accenture Federal Services Company; Olympia (WA); On-site; USD 125,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Mid PKI Engineer to design, implement, and maintain enterprise PKI services supporting secure authentication, encryption, and digital signatures for mission-critical systems.

The role handles certificate lifecycle management for users, devices, apps, and services, integrates PKI with identity platforms and cloud services, and ensures audit-ready operations and regulatory compliance.

Qualifications

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or equivalent experience.
• 4–7 years in security engineering or infrastructure roles focusing on PKI.
• Deep PKI knowledge: CA hierarchies, trust models, OCSP/CRL, lifecycle controls.
• Familiar with TLS, S/MIME, code signing; secure enterprise configuration.
• Hands-on PKI platform experience and identity/network integrations.
• Strong analytical skills and ability to document designs and runbooks.
• Ability to obtain and maintain a SECRET security clearance; U.S. citizenship required.

Responsibilities

• Architect, deploy, and operate PKI infra across on‑prem and cloud environments.
• Design scalable certificate lifecycle processes for large fleets.
• Integrate PKI with identity platforms, VPN/Wi‑Fi, TLS, and secure email.
• Implement PKI platforms with backup, monitoring, and high availability.
• Define certificate policies and PKI runbooks aligned with regs.
• Lead PKI incident troubleshooting and durable remediation.
• Provide cryptographic guidance to teams on secure PKI usage.

Skills

PKI Expertise

Certificate Lifecycle

Security Engineering

Cryptographic Standards

Clear Communication

Security Clearance

Education

Bachelor’s degree in IT/CS/Cybersecurity or equivalent

Tools

AD CS

HSM

PKI tooling

Job description

ASM Research, An Accenture Federal Services Company, seeks a Mid PKI Engineer to design, implement, and maintain enterprise PKI services supporting secure authentication, encryption, and digital signatures for mission-critical systems.

The role handles certificate lifecycle management for users, devices, apps, and services, integrates PKI with identity platforms and cloud services, and ensures audit-ready operations and regulatory compliance.