Senior PKI Engineer - Enterprise & Cloud Security

ASM Research, An Accenture Federal Services Company; Denver (CO); On-site; USD 125,000 - 137,000; Full time

Job summary

ASM Research, An Accenture Federal Services Company, seeks a Mid PKI Engineer to design, deploy, and maintain enterprise PKI services supporting secure authentication, encryption, and signatures across mission-critical systems.

Responsibilities include architecting PKI infrastructures, managing certificate lifecycles for large fleets, integrating PKI with identity platforms, VPNs, TLS termination, and code signing, and ensuring policy compliance and audit readiness.

Qualifications

• Bachelor’s degree or equivalent in IT, CS, Cybersecurity, or related field.
• 4–7 years in security engineering or infrastructure with PKI focus.
• Deep PKI knowledge: CA hierarchies, trust models, OCSP/CRL.
• Experience with TLS, S/MIME, code signing and secure configuration in enterprise environments.
• Hands-on experience with PKI platforms and tooling, including integration with identity and network security services.
• Ability to obtain and maintain a SECRET security clearance; US citizenship.

Responsibilities

• Architect, deploy, and operate PKI infrastructures across on-prem and cloud.
• Design and manage certificate lifecycles for large fleets of endpoints, applications, and services.
• Integrate PKI with identity platforms, VPN, TLS termination, secure email, and code signing.
• Define and maintain certificate policies and PKI runbooks aligned to security requirements.
• Lead troubleshooting of PKI incidents and provide cryptographic guidance.

Skills

PKI architectures

Certificate lifecycle

Identity platforms integration

Troubleshooting PKI

Security policy guidance

Security clearance

Education

Bachelor’s degree or equivalent in IT/CS/Cybersecurity

Tools

AD CS

HSM-backed key stores

Machine identity management

Cloud PKI

Job description

ASM Research, An Accenture Federal Services Company, seeks a Mid PKI Engineer to design, deploy, and maintain enterprise PKI services supporting secure authentication, encryption, and signatures across mission-critical systems.

Responsibilities include architecting PKI infrastructures, managing certificate lifecycles for large fleets, integrating PKI with identity platforms, VPNs, TLS termination, and code signing, and ensuring policy compliance and audit readiness.