Remote PKI & Certificate Lifecycle Specialist

IQUASAR LLC; Sterling (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401(k)

Dental insurance

Health insurance

Paid time off

Vision insurance

Job summary

iQuasar LLC has an exciting opportunity for a PKI Engineer / Certificate Management Specialist to join our growing team. The PKI Engineer will support USCIS PKI management and modernization, including device certificate lifecycle management and automation of certificate request and approval processes.

This is a remote, full-time contract position. Responsibilities include managing certificate lifecycles, supporting DHS PKI processes, and implementing PKI cloud solutions with various tools and

Qualifications

• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.

Responsibilities

• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.

Skills

PKI knowledge

Certificate lifecycle

PIV authentication

Cloud services

Tools

HSMs

HashiCorp

Certbot

Let’s Encrypt

OAuth/OIDC

AWS EKS

Serverless/Lambda

AWS/Azure/GCP

Job description

iQuasar LLC has an exciting opportunity for a PKI Engineer / Certificate Management Specialist to join our growing team. The PKI Engineer will support USCIS PKI management and modernization, including device certificate lifecycle management and automation of certificate request and approval processes.

This is a remote, full-time contract position. Responsibilities include managing certificate lifecycles, supporting DHS PKI processes, and implementing PKI cloud solutions with various tools and