Secure PKI Engineer & Certificate Lifecycle Specialist

Makpar; United States; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Great benefits package

Flexible work schedules

Career development opportunities

Job summary

Makpar, a comprehensive professional and technical solutions provider for the Federal government, seeks a PKI Engineer to support USCIS PKI management and modernization, including device certificate lifecycle management, NPE CA support, and PIV-based certificate authentication.

This specialized role emphasizes federal PKI, DHS PKI, and automation of certificate request/approval processes, with potential DHS access requirements and US citizenship considerations.

Qualifications

• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required USCIS access.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.

Responsibilities

• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.

Skills

PKI

Certificate lifecycle management

PIV authentication

Federal PKI policy

US citizenship

Tools

HashiCorp

Certbot

Lets Encrypt

OAuth/OIDC

AWS

HSMs

Job description

Makpar, a comprehensive professional and technical solutions provider for the Federal government, seeks a PKI Engineer to support USCIS PKI management and modernization, including device certificate lifecycle management, NPE CA support, and PIV-based certificate authentication.

This specialized role emphasizes federal PKI, DHS PKI, and automation of certificate request/approval processes, with potential DHS access requirements and US citizenship considerations.