Senior PKI Engineer - Enterprise Certificate Automation

ZTI Solutions LLC; Merrifield (VA); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

4 weeks PTO

100% company-paid medical, dental, and

vision for employees and families

4% matching 401(k)

Certification reimbursement

Flexible hybrid work environment

Job summary

ZTI Solutions LLC is seeking a Senior Public Key Infrastructure (PKI) Engineer to architect, automate, and modernize enterprise PKI supporting DoD and Federal customers. This role focuses on enterprise server PKI, certificate lifecycle automation, and trust services to modernize CA infrastructure and support post-quantum planning.

You will collaborate with security teams, integrate PKI with AD, Azure, AWS, and DevSecOps pipelines, and help advance Zero Trust initiatives in mission-critical

Qualifications

• Excellent analytical, problem-solving, and communication skills.
• Experience administering enterprise PKI environments (AD CS or equivalent).
• Experience automating certificate lifecycle management at scale.
• Strong understanding of X.509, CRL/OCSP, and key management.

Responsibilities

• Architect, deploy, administer, and maintain enterprise PKI environments and CA infrastructure (AD CS).
• Design and manage enterprise server certificate strategies across Windows, Linux, virtualization, cloud, web services, APIs, and load balancers.
• Automate certificate lifecycle management (issuance, renewal, revocation, monitoring) using automation tools.
• Deploy, manage, and troubleshoot TLS/SSL certificates and trust chains across the enterprise.
• Integrate PKI services with Active Directory, Azure, AWS, virtualization platforms, and DevSecOps pipelines.
• Support Zero Trust initiatives through machine identity and certificate-based trust.
• Support post-quantum cryptography planning and CNSA 2.0 migration.
• Ensure PKI environments comply with NIST, FIPS, DISA STIGs, and RMF requirements.
• Participate in incident response for certificate compromise or trust-related events.
• Maintain technical documentation and architecture diagrams.
• Provide technical leadership and mentorship to junior engineers.

Skills

Analytical

Problem-solving

Communication

Tools

AD CS

Windows Server

Linux

Azure

AWS

Terraform

Ansible

PowerShell

Python

Bash

Job description

ZTI Solutions LLC is seeking a Senior Public Key Infrastructure (PKI) Engineer to architect, automate, and modernize enterprise PKI supporting DoD and Federal customers. This role focuses on enterprise server PKI, certificate lifecycle automation, and trust services to modernize CA infrastructure and support post-quantum planning.

You will collaborate with security teams, integrate PKI with AD, Azure, AWS, and DevSecOps pipelines, and help advance Zero Trust initiatives in mission-critical