Senior PKI Engineer - TS/SCI Eligible, Trusted Architect

99999 Consulting LLC; Washington (District of Columbia); On-site; USD 180,000 - 235,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Retirement plan

Job summary

99999 Consulting LLC is seeking an experienced PKI/Security Engineer to design and manage PKI architectures, certificate lifecycles, and trust models within a cleared environment. The role emphasizes cross-vendor interoperability and adherence to robust PKI practices.

The successful candidate will lead PKI initiatives, mentor engineers, and ensure TLS/SSL, certificate-based access control, and revocation strategies are correctly implemented across multiple platforms.

Qualifications

• 8+ years experience in PKI or security engineering in cleared environments.
• Active TS; must be able to obtain TS/SCI
• Professional certification required; expert-level capability preferred.
• Demonstrated ability to design and troubleshoot PKI systems across multiple platforms and vendors.

Responsibilities

• Design and manage PKI architectures, including root/intermediate hierarchies, chains of trust, and certificate lifecycle processes.
• Create and maintain segmented trust models (organizational partitions, cross-domain trust, constrained intermediates).
• Generate and support certificates for diverse use cases across vendors and constraints.
• Troubleshoot certificate validation issues across systems, applications, and network boundaries.
• Collaborate with systems, network, and application teams to ensure certificates function correctly.
• Define and enforce certificate policies, revocation strategies (CRL/OCSP), and security controls.
• Mentor engineers on PKI fundamentals and correct implementation practices.
• PKI fundamentals: X.509, certificate chains, trust stores, key management.
• Microsoft CA, OpenSSL, and other PKI tooling.
• TLS/SSL, mutual authentication, certificate-based access control.
• CRL, OCSP, revocation and lifecycle management.
• Hardware security module.

Skills

PKI design

Security engineering

Certificate management

TLS/SSL expertise

Cross-vendor interoperability

Mentoring

Education

Professional certification

Tools

OpenSSL

Microsoft CA

Job description

99999 Consulting LLC is seeking an experienced PKI/Security Engineer to design and manage PKI architectures, certificate lifecycles, and trust models within a cleared environment. The role emphasizes cross-vendor interoperability and adherence to robust PKI practices.

The successful candidate will lead PKI initiatives, mentor engineers, and ensure TLS/SSL, certificate-based access control, and revocation strategies are correctly implemented across multiple platforms.