PKI Engineer - Secure Certificate Lifecycle & Identities

ASM Research, An Accenture Federal Services Company; Lincoln (NE); On-site; USD 125,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company seeks a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin authentication, encryption, and digital signatures for mission-critical systems.

The role includes managing certificate lifecycles, enforcing PKI policies, and coordinating with security stakeholders to ensure audit-ready operation in a federal IT environment.

Qualifications

• Bachelor's degree or equivalent with 4–7 years in security engineering or PKI.
• Deep PKI knowledge incl CA hierarchies, OCSP/CRL, lifecycle controls.
• Experience with AD CS, cloud PKI, HSM, and machine identity management.

Responsibilities

• Architect, deploy PKI infrastructures across on-prem and cloud.
• Design and manage certificate lifecycle for large fleets of endpoints, apps and services.
• Integrate PKI with identity platforms, VPN/Wi‑Fi, TLS termination, email, and code signing.
• Implement PKI tooling with backup, monitoring, and high availability.
• Lead policy, runbook development and PKI incident remediation.
• Provide cryptographic guidance to security and application teams.

Skills

PKI architectures

TLS/S/MIME

Code signing

Certificate lifecycle

Troubleshooting PKI

Cryptography basics

Communication skills

Education

Bachelor's degree in IT/CS/Cybersecurity or equivalent

Tools

AD CS

Cloud PKI

HSM-backed key stores

Machine identity management

Job description

ASM Research, An Accenture Federal Services Company seeks a Mid PKI Engineer to design, implement, and maintain enterprise PKI services that underpin authentication, encryption, and digital signatures for mission-critical systems.

The role includes managing certificate lifecycles, enforcing PKI policies, and coordinating with security stakeholders to ensure audit-ready operation in a federal IT environment.