Senior Enterprise PKI & Identity Engineer

Concept-Solution; Washington (District of Columbia); On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Health insurance

401(k) with matching

Career development opportunities

Job summary

Concept Solutions is seeking a Senior PKI & Identity Infrastructure Engineer (FAA Enterprise Services) to lead enterprise PKI, identity services, and cryptographic operations in a high-security federal environment in Washington, DC. You will guide PKI architecture, CA/RA/VA operations, and secure certificate lifecycle management across Windows and Linux platforms.

You will also manage HSMs (Thales/Luna), implement EJBCA, ACME/SCEP, OCSP/CRL, and support containerized deployments, databases, and

Qualifications

• Bachelor’s degree or equivalent in information systems or related field.
• 5+ years (or 4+ years in lieu of BS) of relevant PKI/identity infra experience.
• Advanced PKI service experience in large-scale environments.
• Strong expertise with Windows Server, RHEL, and secure system administration.
• Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL.
• Hands-on experience with HSM technologies (Thales, Luna, or equivalent).
• Knowledge of Docker/containerized infrastructure.
• Experience with IIS, Apache, JBoss, PostgreSQL, and MariaDB.
• Familiarity with federal cybersecurity, FAA environments preferred.

Responsibilities

• Serve as a senior technical lead for enterprise PKI architecture, administration, and operational support (CAs, RAs, VAs).
• Administer PKI platforms across Windows and Linux, including EJBCA operations, enrollment, CRL, OCSP, and AIA services.
• Manage HSMs (Thales/Luna) and ensure compliance with federal cryptographic standards.
• Administer RHEL and Windows Server environments; patching, hardening, authentication integration.
• Support Docker/containerized solutions and web/app infrastructure (IIS, Apache, JBoss).
• Maintain PostgreSQL and MariaDB environments for PKI and identity services.
• Develop SOPs, architecture diagrams, and audit artifacts; collaborate with FAA stakeholders.

Skills

Enterprise PKI architecture

Windows Server

Red Hat Enterprise Linux

Certificate lifecycle management

HSM (Thales/Luna)

EJBCA

ACME / SCEP

OCSP / CRL

Docker / containerized infra

IIS / Apache / JBoss

PostgreSQL / MariaDB

Education

Bachelor’s degree in Information Systems

5+ years relevant experience in lieu of BS

Tools

EJBCA

Thales HSM

Luna HSM

IIS

Apache

JBoss

PostgreSQL

MariaDB

Docker

Job description

Concept Solutions is seeking a Senior PKI & Identity Infrastructure Engineer (FAA Enterprise Services) to lead enterprise PKI, identity services, and cryptographic operations in a high-security federal environment in Washington, DC. You will guide PKI architecture, CA/RA/VA operations, and secure certificate lifecycle management across Windows and Linux platforms.

You will also manage HSMs (Thales/Luna), implement EJBCA, ACME/SCEP, OCSP/CRL, and support containerized deployments, databases, and