PKI Systems Engineer

Concepts Beyond, LLC; United States; On-site; USD 150,000 - 180,000; Full time

Job summary

Concepts Beyond is hiring a senior PKI engineer to support and sustain enterprise PKI operations for the NAS, managing the full certificate lifecycle and enabling secure TLS/SSL across diverse environments.

You will design, deploy, harden, and administer PKI platforms, troubleshoot chain and trust issues, and automate certificate issuance and renewal at scale, collaborating with software and systems engineers within the FAA program space.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, or a related field; 15+ years of relevant experience.
• Experience designing, deploying, administering PKI environments across full certificate lifecycle (issuance, renewal, revocation via CRL/OCSP, rekeying, archival).
• Experience integrating digital certificates into servers, apps, network devices, and cloud services for TLS/SSL.
• Experience automating certificate issuance, renewal, deployment processes.

Responsibilities

• Design, deploy, and maintain PKI environments across full certificate lifecycle.
• Configure and harden PKI management tools and platforms across diverse environments.
• Integrate certificates into servers, applications, network devices, and cloud services to enable TLS/SSL.
• Coordinate with FAA program offices and stakeholders on PKI and identity management dependencies.
• Support operations including ticketing, documentation, and backup coverage.

Skills

PKI expertise

Security policy knowledge

Scripting for automation

Education

Bachelor’s degree in Engineering/Computer Science

Tools

EJBCA

Venafi

Microsoft ADCS

Python

PowerShell

Ansible

Job description

• Base Pay $150,000.00 - $180,000.00 / Year
• Job Category Cybersecurity, Software Engineering, Technical Lead
• Required Degree 4 Year Degree

Contact information

• Email [e-mail]

Description

Support and sustain enterprise Public Key Infrastructure (PKI) operations for the National Airspace System (NAS), administering the full certificate lifecycle and ensuring secure, standards-compliant certificate issuance and validation across a diverse operational environment.

You will configure, harden, and administer PKI management tools and platforms, troubleshoot certificate chain and trust store issues, and integrate digital certificates into servers, applications, network devices, and cloud services to enable secure TLS/SSL communications — automating issuance, renewal, and deployment at scale.

Concepts Beyond provides Software Engineering, Systems Engineering, and Aviation expertise to develop advanced Air Traffic Management concepts; develops cybersecurity solutions in PKI, post-quantum computing, zero trust & confidential computing; Develops AI/ML and cloud computing tools for Aviation Safety & Data Analytics.

Key Responsibilities

• PKI Environment Design & Certificate Lifecycle Management

Design, deploy, administer, and maintain PKI environments, encompassing the full certificate lifecycle from issuance and renewal through revocation (CRL/OCSP), rekeying, and archival, ensuring configurations align with security policy, operational risk tolerance, and long-term sustainment goals.

Configure, harden, and administer PKI management tools and platforms across diverse system environments to support secure certificate issuance and validation workflows, troubleshoot certificate chain and trust store errors, and maintain consistent, standards-based configurations across heterogeneous operational environments.

• Multi-Perspective Issuance Corroboration (MPIC)
• Certificate Integration & Automation

Integrate digital public certificates into servers, applications, network devices, and cloud-based services to enable secure TLS/SSL communications, including automating certificate issuance, renewal, and deployment processes to reduce manual effort, minimize error rates, and support faster, more reliable certificate provisioning at scale.

• Program Support & Operations

Review FAA program and project documentation to identify PKI, digital certificate, and dependencies and risks, coordinating with program offices and technical stakeholders to align certificate management practices and automation initiatives with FAA program schedules and requirements. Support day-to-day operations including ticketing systems, documentation, NIST-aligned security policy compliance, and backup coverage to ensure operational redundancy and continuity.

• Industry Engagement & Outreach

Contribute to working groups and standards bodies, and represent the organization externally through publications, conference presentations, and panel participation.

• Strategic Insight & Opportunity Identification

Stay current on government and industry activities to identify emerging trends, gaps, and innovation opportunities. Contribute ideas that support growth and new business opportunities.

Requirements

• Bachelor’s degree in Engineering, Computer Science, or a related field, plus 15+ years of relevant experience.
• Experience designing, deploying, administering, and maintaining PKI environments across the full certificate lifecycle (issuance, renewal, revocation via CRL/OCSP, rekeying, archival).
• Experience configuring, hardening, and administering PKI management tools and platforms across diverse system environments.
• Experience troubleshooting certificate chain and trust store errors and maintaining standard-based configurations across heterogeneous environments.
• Experience integrating digital public certificates into servers, applications, network devices, and cloud-based services for secure TLS/SSL communications.
• Experience automating certificate issuance, renewal, and deployment processes.
• Experience reviewing program and project documentation to identify PKI and identity management dependencies and risks, and coordinating with program offices and technical stakeholders.
• Familiarity with NIST-aligned security policy compliance and day-to-day operational support (ticketing systems, documentation, backup coverage).

Preferred Qualifications

• Experience working with FAA or other government programs.
• Familiarity with Non-Personnel Entity (NPE) Identity Management Systems.
• Certifications such as CISSP, Security+, or equivalent.
• Experience with PKI/CA platforms (e.g., EJBCA, Venafi, Microsoft ADCS).
• Scripting or automation experience (e.g., Python, PowerShell, Ansible) for certificate lifecycle automation.
• Awareness of or experience with post-quantum cryptography (PQC).