Senior PKI Engineer / SME

99999 Consulting LLC; Washington (District of Columbia); Vor Ort; USD 180.000 - 235.000; Vollzeit

Benefits dieser Stelle

Medical benefits

Dental benefits

Vision benefits

Retirement plan

Zusammenfassung

99999 Consulting LLC is seeking an experienced PKI/Security Engineer to design and manage PKI architectures, certificate lifecycles, and trust models within a cleared environment. The role emphasizes cross-vendor interoperability and adherence to robust PKI practices.

The successful candidate will lead PKI initiatives, mentor engineers, and ensure TLS/SSL, certificate-based access control, and revocation strategies are correctly implemented across multiple platforms.

Qualifikationen

• 8+ years experience in PKI or security engineering in cleared environments.
• Active TS; must be able to obtain TS/SCI
• Professional certification required; expert-level capability preferred.
• Demonstrated ability to design and troubleshoot PKI systems across multiple platforms and vendors.

Aufgaben

• Design and manage PKI architectures, including root/intermediate hierarchies, chains of trust, and certificate lifecycle processes.
• Create and maintain segmented trust models (organizational partitions, cross-domain trust, constrained intermediates).
• Generate and support certificates for diverse use cases across vendors and constraints.
• Troubleshoot certificate validation issues across systems, applications, and network boundaries.
• Collaborate with systems, network, and application teams to ensure certificates function correctly.
• Define and enforce certificate policies, revocation strategies (CRL/OCSP), and security controls.
• Mentor engineers on PKI fundamentals and correct implementation practices.
• PKI fundamentals: X.509, certificate chains, trust stores, key management.
• Microsoft CA, OpenSSL, and other PKI tooling.
• TLS/SSL, mutual authentication, certificate-based access control.
• CRL, OCSP, revocation and lifecycle management.
• Hardware security module.

Kenntnisse

PKI design

Security engineering

Certificate management

TLS/SSL expertise

Cross-vendor interoperability

Mentoring

Ausbildung

Professional certification

Tools

OpenSSL

Microsoft CA

Jobbeschreibung

Full time | 99999 Consulting LLC | United States

Job Information

IT Services

City Joint Base Anacostia Bolling

State/Province District of Columbia

20032

Job Description

• Clearance: Active TS; must be able to obtain TS/SCI
• Benefits: Medical, Dental, Vision, Retirement and more

What This Job Feels Like

• Work centers on designing and maintaining trust models that other systems depend on, often with little margin for error.
• Problems are rarely straightforward—solutions must account for vendor constraints, security requirements, and interoperability edge cases.
• Ownership of PKI architecture and implementation from policy design through operational support.
• High OPTEMPO; requires precision, persistence, and disciplined follow-through.

What You’ll Do

• Design and manage PKI architectures, including root/intermediate hierarchies, chains of trust, and certificate lifecycle processes.
• Create and maintain segmented trust models (organizational partitions, cross-domain trust, constrained intermediates).
• Generate and support certificates for diverse use cases, including handling vendor-specific constraints and non-standard requirements (e.g., wildcard usage, SAN configurations, custom extensions).
• Troubleshoot certificate validation issues across systems, applications, and network boundaries.
• Collaborate with systems, network, and application teams to ensure certificates function correctly within their environments.
• Define and enforce certificate policies, revocation strategies (CRL/OCSP), and security controls.
• Mentor engineers on PKI fundamentals and correct implementation practices.
• PKI fundamentals: X.509, certificate chains, trust stores, key management
• Microsoft CA, OpenSSL, and other PKI tooling
• TLS/SSL, mutual authentication, certificate-based access control
• CRL, OCSP, revocation and lifecycle management
• Hardware security module

Requirements

• 8+ years experience in PKI, security engineering, or related systems roles in secure/cleared environments
• Active TS; must be able to obtain TS/SCI
• Professional certification required; expert-level capability preferred
• Demonstrated ability to design and troubleshoot PKI systems across multiple platforms and vendors
• Experience with complex trust models and real-world certificate interoperability challenges
• The likely salary range for this position is $180,000-$235,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, and contractual agreements and could fall outside of this range.