PKI & Identity Security Architect (Remote)

Capital Technology Group; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote work

Medical, Dental, Vision

Life Insurance

Disability Insurance

401(k) matching

Education Budget

Wellness Budget

Employee Assistance Program

Job summary

Capital Technology Group is seeking a PKI Architect to design, implement, and modernize enterprise PKI and identity trust services for mission-critical federal systems. This senior role demands deep cryptographic expertise and scalable infrastructure experience.

You will build cloud-native solutions on AWS and Azure, automate deployments with Ansible and CI/CD, and partner with security teams to enforce DevSecOps and Zero Trust principles. U.S. citizenship is required.

Qualifications

• Bachelor's degree or equivalent in a technical field.
• 4+ years in PKI, IAM, or security architecture.
• Experience in FPKI/FICAM environments.
• Experience with PKI automation and HSMs.
• Knowledge of X.509 and certificate policies.
• Familiarity with NIST/FISMA/Zero Trust.

Responsibilities

• Design PKI architectures and zero-trust authentication.
• Build cloud-native solutions on AWS/Azure.
• Automate deployments with CI/CD and Ansible.
• Collaborate with security and engineering teams.
• Support compliance with NIST, FISMA, FIPS.
• Monitor and optimize security tooling and performance.

Skills

PKI architecture

cryptography

IAM

Cloud security

DevSecOps

FIPS/NIST compliance

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

DigiCert

Entrust

Microsoft AD CS

Let's Encrypt

Docker

Kubernetes

Job description

Capital Technology Group is seeking a PKI Architect to design, implement, and modernize enterprise PKI and identity trust services for mission-critical federal systems. This senior role demands deep cryptographic expertise and scalable infrastructure experience.

You will build cloud-native solutions on AWS and Azure, automate deployments with Ansible and CI/CD, and partner with security teams to enforce DevSecOps and Zero Trust principles. U.S. citizenship is required.