PKI & HSM Engineer — Hybrid, Secret Clearance

Nationwide IT Services, Inc.; Fairfax (VA); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan with employer match

Paid holidays and PTO

Job summary

Nationwide IT Services (NIS) seeks an experienced PKI & HSM Engineer to support the NATO PQC Pilot Project. This hands‑on role will modernize enterprise PKI, implement hybrid certificates, and integrate HSMs for secure key management.

Based in Fairfax, VA with a hybrid on-site requirement, you will plan key ceremonies, assist RMF/ATO evidence, and document architecture for NATO reviews. A Bachelor’s degree, 5+ years PKI, and active Secret clearance are required; Security+ and vendor HSM

Qualifications

• 5+ years of enterprise PKI in production.
• Hands-on HSM administration incl. multi-person auth.
• Experience with dual-control key ceremonies and audits.
• U.S. Secret clearance and US person status.

Responsibilities

• Design, deploy, and operate enterprise PKI with CA hierarchies.
• Administer HSMs including partitioning and key mgmt.
• Implement hybrid X.509 certificates with PQC components.
• Plan dual-control key ceremonies and maintain audit evidence.
• Support RMF/ATO security evidence and documentation.
• Create cutover plans, rollback criteria, and go/no-go evidence.
• Troubleshoot TLS/mTLS, code signing, and S/MIME integrations.
• Document architecture and SOPs for NATO review.

Skills

PKI engineering

HSM admin

Certificate lifecycle

Python/PowerShell

FIPS RMF knowledge

TLS/mTLS expertise

Dual-control ceremonies

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Thales Luna HSM

Entrust nShield

Microsoft AD CS

EJBCA

Job description

Nationwide IT Services (NIS) seeks an experienced PKI & HSM Engineer to support the NATO PQC Pilot Project. This hands‑on role will modernize enterprise PKI, implement hybrid certificates, and integrate HSMs for secure key management.

Based in Fairfax, VA with a hybrid on-site requirement, you will plan key ceremonies, assist RMF/ATO evidence, and document architecture for NATO reviews. A Bachelor’s degree, 5+ years PKI, and active Secret clearance are required; Security+ and vendor HSM