Senior PKI & IAM Engineer - Ansible Automation

ENS Solutions, LLC; Reston (VA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401k Contribution from Day 1

PTO + 11 Paid Federal Holidays

Long & Short Term Disability Insurance

Group Term Life Insurance

Tuition, Certification & Professional

Relocation Assistance

Job summary

ENS Solutions, LLC is seeking an experienced PKI/IAM Engineer to design, implement, automate, and maintain secure identity and cryptographic infrastructure for large-scale enterprise environments. You will collaborate with security and infrastructure teams to support authentication, certificate management, and credential lifecycles across Linux-based PKI services.

The ideal candidate has 5+ years of PKI engineering or related work, strong Linux administration skills, and hands-on experience with

Qualifications

• 5+ years of experience in PKI engineering, infrastructure security, or systems administration.
• 8570/8140 Certification
• Strong Linux system administration experience
• Hands-on experience with Public Key Infrastructure (PKI) and Certificate Authority design, setup, and operations
• LDAP administration and integrations
• Ansible automation
• Bash scripting
• Experience with certificate lifecycle management and automation
• Understanding of asymmetric cryptography concepts and TLS/SSL certificates
• Linux security principles and system hardening
• Experience troubleshooting certificate and authentication issues in enterprise environments
• Strong written and verbal communication skills
• Preferred: Hardware Security Modules (HSMs)
• Knowledge of ACME protocol and automated certificate enrollment
• Experience with DevOps or IaC practices
• Experience with AWS
• Familiarity with IAM solutions

Responsibilities

• Design, implement, configure, and maintain enterprise PKI environments
• Administer Linux-based systems hosting PKI services
• Manage certificate lifecycle operations (issuance, renewal, revocation, validation)
• Develop automation for certificate deployment and lifecycle management using Ansible and Bash
• Configure LDAP integrations and directory services for PKI
• Define and maintain policies, standards, and procedures
• Troubleshoot PKI, certificates, trust chains, and TLS/SSL configurations
• Collaborate with security and infrastructure teams to ensure compliance
• Implement monitoring, auditing, backup, and disaster recovery for PKI systems
• Support cryptographic services and secure communications across platforms
• Create and maintain architecture diagrams and playbooks

Skills

PKI engineering

Linux administration

Ansible automation

Bash scripting

LDAP integration

Certificate Authority

Tools

Ansible

AWS

HSMs

Job description

ENS Solutions, LLC is seeking an experienced PKI/IAM Engineer to design, implement, automate, and maintain secure identity and cryptographic infrastructure for large-scale enterprise environments. You will collaborate with security and infrastructure teams to support authentication, certificate management, and credential lifecycles across Linux-based PKI services.

The ideal candidate has 5+ years of PKI engineering or related work, strong Linux administration skills, and hands-on experience with