PKI & Identity Infrastructure Engineer (FAA Enterprise Services)

Concept Solutions, LLC; Washington (District of Columbia); On-site; USD 80,000 - 100,000; Full time

Job summary

Concept Solutions, LLC is seeking a Senior PKI & Identity Infrastructure Engineer to support FAA Enterprise Services. You will lead PKI architecture across CAs/RA/VA and manage PKI platforms on Windows and Linux, including HSM operations, certificate lifecycle, and security compliance.

Ideal candidates have extensive PKI, identity infrastructure, and secure systems administration experience in federal environments and will collaborate with cybersecurity, infrastructure, and business stakeholders.

Qualifications

• Advanced experience supporting enterprise PKI services in large-scale environments.
• Strong expertise with Windows Server and Red Hat Enterprise Linux.
• Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL.
• Hands-on with HSM technologies (Thales, Luna, or equivalent).

Responsibilities

• Serve as a senior technical lead for enterprise PKI architecture and operations.
• Administer PKI platforms across Windows and Linux including CAs/RAs/VAs.
• Manage HSMs and cryptographic material handling per CP/CPS.
• Support certificate lifecycle management and enterprise trust models.

Skills

PKI management

Windows Server

Red Hat

HSM management

EJBCA

ACME/SCEP

OCSP

CRL

Docker

IIS

Apache

JBoss

PostgreSQL

MariaDB

Certificate lifecycle

Education

Bachelor’s degree in Information Systems

Tools

EJBCA

HSM (Thales/Luna)

Kubernetes

Job description

Description

Concept Solutions is seeking a PKI & Identity Infrastructure Engineer (FAA Enterprise Services) supporting one of the nation’s most complex enterprise environments. We are seeking a highly skilled Senior PKI & Identity Infrastructure Engineer to serve as a technical authority across enterprise Public Key Infrastructure (PKI), identity services, directory systems, Linux/Windows administration, and secure cryptographic operations.

This role is ideal for an advanced systems engineer who thrives in high-security, large-scale federal environments and is passionate about securing enterprise authentication, certificate lifecycle management, and infrastructure resilience. You will play a key role in supporting secure digital trust across the FAA while collaborating with cybersecurity, infrastructure, and business stakeholders.

Enterprise PKI & Cryptographic Services

• Serve as a senior technical lead for enterprise PKI architecture, administration, and operational support across Certification Authorities (CAs), Registration Authorities (RAs), and Validation Authorities (VAs)


• Administer and maintain PKI platforms across Windows and Linux environments, including EJBCA operations, ACME, SCEP, certificate enrollment, CRL distribution, OCSP, CDP, and AIA services


• Execute and document PKI key ceremonies, offline root CA operations, and cryptographic material handling in compliance with Certificate Policies (CP) and Certification Practice Statements (CPS)


• Manage and maintain Hardware Security Modules (HSMs), including Thales and Luna platforms, ensuring compliance with federal cryptographic standards


• Support secure certificate lifecycle management, validation services, and enterprise trust models

Identity Infrastructure & Systems Administration

• Administer Red Hat Enterprise Linux (RHEL) environments supporting PKI, identity, and application services including patching, hardening, authentication integration, and compliance


• Perform comprehensive Microsoft Windows Server administration including lifecycle management, patching, WSUS/Tanium baselines, hardening, backup validation, and remediation


• Support Docker/containerized solutions aligned with enterprise deployment and security standards


• Maintain supporting web/application infrastructure including IIS, Apache, and JBoss

Database & Operational Support

• Support PostgreSQL and MariaDB environments for PKI and identity services


• Perform maintenance, backup validation, availability monitoring, and operational troubleshooting


• Ensure service reliability using SLA/SLO/SLI performance principles

Documentation, Compliance & Collaboration

• Develop and maintain SOPs, architecture diagrams, lifecycle documentation, audit artifacts, and operational procedures


• Partner with cybersecurity teams, FAA stakeholders, Lines of Business, and enterprise customers to support mission requirements


• Present technical solutions clearly to both technical and non-technical stakeholders


• Support compliance, audit readiness, and continuous service improvement

Requirements

• Bachelor’s degree in Information Systems, IT Management, Business Systems, MIS


• 5+ years or an additional 4+ years of relevant experience in lieu of an BS degree


• Advanced experience supporting enterprise PKI services in large-scale environments


• Strong expertise with Windows Server, Red Hat Enterprise Linux, and secure systems administration


• Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL


• Hands-on experience with HSM technologies (Thales, Luna, or equivalent)


• Knowledge of Docker/containerized infrastructure


• Experience with IIS, Apache, JBoss, PostgreSQL, and MariaDB


• Familiarity with federal cybersecurity, compliance, or FAA enterprise environments highly preferred

Compensation: $80K to $100K

Location and Schedule

• Location: Washington, DC


• Schedule: Monday through Friday, 9:00 AM – 3:00 PM (local time)


• Security Requirement: FAA Personnel Suitability Clearance required.

Company Profile:

Founded in 1999 and headquartered in Reston, Virginia, Concept Solutions, LLC (CS) is a leading small business in technology, engineering, and management consulting. We are the innovative and agile force behind strategic solutions that enhance organizational efficiency and safeguard our nation across Aerospace, Defense, and National Security sectors.

For over 25 years, CS has been a trusted partner for the Federal Aviation Administration (FAA), Department of Homeland Security (DHS), Department of Justice (DOJ), Department of Defense (DoD) and other federal agencies delivering vital IT, security, and project management services.

Our commitment to excellence is reflected in our adherence to CMMI-DEV ML3, ISO 9001:2015, ISO/IEC 20000-1:2018, and ISO/IEC 27001-1:2013 standards. CS boasts company highlights that include:

• Over two decades of experience across over $300 million in contract awards supporting critical FAA programs


• Multiple contract vehicles providing opportunities across FAA, DoD, NOAA, and other Federal agencies


• Innovation Council - CS maintains an active Internal Research and Development (IR&D) program that is geared towards identifying emerging technologies and pursuing technological innovations

At CS, we know our success stems from our talented team. That’s why we prioritize the wellbeing and growth of our employees, fostering a positive culture centered on innovation, engagement, and career development.

Benefits: Concept Solutions offers a competitive benefits and salary package you would receive from a large company. We offer health, dental, vision and life insurance, as well as a comprehensive 401(k) plan with matching and immediate vesting.

Concept Solutions is an Equal Opportunity Employer, and we value workplace diversity. We invite resumes from all interested parties and consider applicants for all positions without regard to race, color, religion, sex, national origin, age, marital status, sexual preference, personal appearance, family responsibility, the presence of a non-job-related medical condition or physical disability, matriculation, political affiliation, veteran status, or any other legally protected status. Concept Solutions is a VEVRAA federal contractor, and we request priority referral of veterans for available positions.