Senior Cybersecurity Engineer - PKI Security

Phia LLC; Fairfax (VA); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

401k with company match

Paid Holidays

PTO

Job summary

phia LLC is seeking a Senior Cybersecurity Engineer (PKI Security) to support PKI administration and CA operations for a large Federal agency. This role emphasizes automation, scripting, and certificate lifecycle management, with remote work flexibility for US Citizens.

The candidate will leverage Venafi/CyberArk, ADCS, and scripting to improve security and operational efficiency while supporting audit and governance requirements in a federal context.

Qualifications

• Demonstrated PKI and CA administration experience.
• Strong automation, scripting, and AI-driven process interest.
• Proven ability to work in a fast-paced environment with attention to detail.

Responsibilities

• Provide PKI lifecycle management guidance and operations.
• Automate certificate management and CA tasks across enterprise environments.
• Mentor PKI team and develop requirements for critical apps.

Skills

Automation & scripting

REST API integration

SCEP

Microsoft AD auto-enrollment

PKI Administration

PowerShell

Python

Venafi/CyberArk

Active Directory / LDAP

Public Key Infrastructure

Education

BA/BS in cybersecurity, IT or related field

9+ years of direct cybersecurity/IT experience

Tools

Venafi

CyberArk

ADCS / Microsoft CA

VCERT

Ansible

Visual Studio Code

Job description

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients.

phia is hiring a Senior Cybersecurity Engineer (PKI Security) to support cyber protection engineering and operations at a large Federal agency. This role focuses on providing technical expertise for PKI Administration and Certificate Authority operations across complex enterprise environments. The ideal candidate will have deep experience with encryption technologies, PKI administration and operations, and configuration automation and scripting.

This position offers REMOTE work flexibility. Qualified candidates will be U.S. Citizens and located in the United States, able to achieve Public Trust security vetting approval.

What You'll Do:

• Support internal and external customers with certificate-related issues across USPS applications and services.
• Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
• Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
• Support certificate automation using Venafi/CyberArk Trust Protection Platform (TPP) identifying opportunities to incorporate AI into automation efforts.
• Create reports and documentation using AI and other automation tools.
• Provide mentorship and management support for the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff

• Stay current on encryption technologies and standards, with particular focus on PKI and CA productions, solutions, and operational best practices.
• Provide status and activity reporting and plans to management.

Who You Are / What You Bring:

• Extensive automation and scripting experience and capabilities
• Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment
• Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code
• Proficiency in PowerShell and Python scripting
• Strong understanding of Public Key Infrastructure (PKI) including:
  • Certificate Authority (CA) Administration
  • Certificate Enrollment Web Service & Policy Web Service
  • Active Directory Certificate Services (ADCS) monitoring
• Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration
• Strong communication skills with IT customers, developers, and system administrators
• Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs)
• Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions
• Knowledge of Post Quantum Cryptography (PQC)
• Ability to work independently, work in a fast-paced environment, and attention to detail
• Excellent communication, organizational, and interpersonal skills

Preferred Skills:

• Experience with ServiceNow or other Change/Incident/Problem management ticketing technology
• IT system administration experience (systems management, networks, firewalls) in an enterprise environment
• Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting
• Experience with Unix and Linux configuration and troubleshooting
• Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
• Proficiency with server virtualization technologies (VMWare, HyperV)
• Database administration (MSSQL) experience

Required Education + Experience:

• BA/BS in cybersecurity, IT or related field, with 9+ years of direct experience in cybersecurity and IT administration/engineering

...or...

• 12+ years of experience in cybersecurity and IT administration/engineering

Certifications (desired, or similar):

• CyberArk / Venafi Security Administrator (VSA)
• Entrust nShield Certified Systems Engineer (nCSE)
• EC-Council Certified Encryption Specialist (ECES)
• Core cybersecurity certifications (e.g. CISSP, CompTIA Security+)
• Core networking certifications (e.g. CompTIA Network+, CCNA, CCENT)

Security Clearance/Vetting:

• U.S. Citizenship required
• Ability to obtain Public Trust clearance

Who We Are

phia LLC ("phia") is a Northern Virginia based, small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis & Incident Response, Cyber Architecture & Capability Analysis, Cyber Policy & Strategy, Information Assurance/Security, Compliance, Certification & Accreditation, Communications Security, Traditional Security, and Facilities Security. phia also provides cyber operations support functions such as: Program and Process Management, Engineering, Development, and Systems Administration that allows for Cyber Operations to efficiently integrate our customer's missions and objectives. phia supports various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities.

phia offers excellent benefits to enhance work-life balance, including the following:

• Medical Insurance
• Dental Insurance
• Vision Insurance
• Life Insurance
• Short Term & Long Term Disability
• 401k Retirement Savings Plan with Company Match
• Paid Holidays
• Paid Time Off (PTO)
• Tuition and Professional Development Assistance