Senior PKI Engineer - DoD-Certified CA & HSM

NTT DATA, Inc.; Newport News (VA); On-site; USD 76,000 - 113,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k with match

Paid time off

Job summary

NTT DATA in Newport News, VA seeks a PKI Engineering Specialist to lead planning, deployment, administration, and maintenance of enterprise PKI environments supporting DoD requirements. You will ensure security, availability, compliance, and operational effectiveness of PKI services including CAs, HSMs, certificate lifecycle systems, and related applications.

This role requires onsite presence daily in a hybrid Agile environment, with the ability to work independently, research problems, and

Qualifications

• Minimum 6 years of experience planning, deploying, administering, and maintaining enterprise PKI environments.
• IAT II or higher certification.
• Active Secret Security Clearance.

Responsibilities

• Lead enterprise PKI initiatives including planning, deployment, integration, and maintenance of Microsoft and DoD-compliant PKI solutions.
• Design, implement, manage, and support Certificate Authority infrastructure (root and subordinate CAs).
• Administer Hardware Security Modules (HSMs) for key protection and CA operations.
• Develop and maintain PKI policies, CPS, and procedures per DoD, NIST, and best practices.
• Manage full certificate lifecycle across users, computers, servers, devices, and apps.
• Deploy certificate management solutions for automated enrollment and lifecycle management.
• Ensure PKI systems comply with FISMA, DISA STIGs, and cybersecurity requirements.
• Perform PKI health monitoring, troubleshooting, RCA, and incident response.
• Coordinate with cyber, network, and application teams to integrate PKI services.
• Participate in hybrid-agile projects, potentially as Scrum Master.
• Analyze PKI architectures to identify deficiencies and improvements.
• Document PKI architectures, configurations, DR plans, and changes.

Skills

PKI architecture

DoD PKI

HSM administration

Hybrid/Agile work

Education

IAT II or higher certification

Active Secret Security Clearance

Bachelor's degree in IT / Cybersecurity / CS / Engineering

Tools

Active Directory Certificate Services (AD CS)

Entrust

Keyfactor

Venafi

Job description

NTT DATA in Newport News, VA seeks a PKI Engineering Specialist to lead planning, deployment, administration, and maintenance of enterprise PKI environments supporting DoD requirements. You will ensure security, availability, compliance, and operational effectiveness of PKI services including CAs, HSMs, certificate lifecycle systems, and related applications.

This role requires onsite presence daily in a hybrid Agile environment, with the ability to work independently, research problems, and