Senior PKI & IAM Engineer — Secure Identities at Scale

Booz Allen Hamilton; Washington (District of Columbia); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a Public Key Infrastructure Engineer to advance IAM/Zero Trust initiatives. You will support large-scale PKI projects, interface with stakeholders and engineering teams to map dependencies and drive secure identity lifecycles.

You will design, deploy, and operate enterprise credential systems from PKI to SSO and privileged access, helping stop adversaries from accessing assets.

Qualifications

• 3+ years of PKI experience in cybersecurity.
• Experience with Active Directory Certificate Services.
• Experience implementing security best practices.
• Experience with certificate authority design, setup, and operations.
• Experience with certificate lifecycle management and automation.
• Knowledge of certificate policies and certificate contents.
• Knowledge of Linux systems and asymmetric cryptography concepts.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• HS diploma or GED.

Responsibilities

• Support large-scale IAM projects for Booz Allen’s clients.
• Interface with stakeholders and engineering teams to detail processes and user roles.
• Analyze the identity lifecycle and articulate access requirements.
• Design, deploy, and support systems that verify user privileges and manage credentials.
• Implement enterprise‑class solutions from single sign‑on to privileged access systems.

Skills

PKI experience

IAM concepts

Security best practices

Certificate lifecycle management

Linux knowledge

Cryptography concepts

TS/SCI clearance

Education

HS diploma or GED

Tools

Active Directory Certificate Services

Keyfactor

Venafi

ACME processes

SCEP processes

Job description

Booz Allen Hamilton is seeking a Public Key Infrastructure Engineer to advance IAM/Zero Trust initiatives. You will support large-scale PKI projects, interface with stakeholders and engineering teams to map dependencies and drive secure identity lifecycles.

You will design, deploy, and operate enterprise credential systems from PKI to SSO and privileged access, helping stop adversaries from accessing assets.