Senior PKI Engineer - Enterprise CA & Zero Trust

ZTI Solutions LLC; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

4 weeks PTO

Certification reimbursement

401(k) with 4% match

Hybrid work environment

Job summary

ZTI Solutions LLC seeks a Senior PKI Engineer to architect, automate, and modernize enterprise PKI supporting DoD and Federal customers. Focus on enterprise server PKI, CA infrastructure, and certificate management at scale.

You will modernize CA, automate certificate handling, support post-quantum planning, and advance Zero Trust in mission-critical environments. Hybrid work with up to 3 days onsite in Fairfax, VA; Top Secret clearance sponsorship.

Qualifications

• Senior PKI Engineer with enterprise-scale experience.
• U.S. Citizen with active clearance; Top Secret eligible.
• 8+ years in systems/security engineering with 4+ years focused on PKI.
• Experience administering AD CS or enterprise PKI platforms.
• Experience automating certificate lifecycle management at scale.

Responsibilities

• Architect, deploy, administer, and maintain enterprise PKI and CA infrastructure (AD CS).
• Design and manage certificate strategies across Windows, Linux, cloud, and network layers.
• Automate certificate lifecycle management using ACME, SCEP/EST, REST APIs, and scripting.
• Deploy, manage, and troubleshoot TLS/SSL certificates and trust chains.
• Integrate PKI with AD, Azure, AWS, virtualization, and DevSecOps pipelines.
• Support Zero Trust initiatives via machine identities and certificate trust.
• Plan for post-quantum cryptography transition and CNSA 2.0 migration.
• Ensure PKI compliance with NIST, FIPS, DISA STIGs, RMF; participate in incident response.
• Maintain documentation, architecture diagrams, SOPs, and baselines.
• Provide technical leadership and mentorship to junior engineers.

Skills

PKI engineering

DoD security

Scripting

Automation

TLS/SSL

Zero Trust

Cloud platforms

Incident response

Tools

AD CS

ACME

SCEP/EST

PowerShell

Python

Ansible

Terraform

REST APIs

Job description

ZTI Solutions LLC seeks a Senior PKI Engineer to architect, automate, and modernize enterprise PKI supporting DoD and Federal customers. Focus on enterprise server PKI, CA infrastructure, and certificate management at scale.

You will modernize CA, automate certificate handling, support post-quantum planning, and advance Zero Trust in mission-critical environments. Hybrid work with up to 3 days onsite in Fairfax, VA; Top Secret clearance sponsorship.