Software Engineer, PKI System

Concepts Beyond; Maryland; On-site; USD 180,000 - 230,000; Full time

Job summary

Concepts Beyond is seeking an experienced software engineer to advance enterprise cybersecurity for the National Airspace System, with a focus on PKI, certificate lifecycle management, and secure tooling.

You will apply hands-on Java development to design, build, and maintain PKI systems, integrate with EJBCA, and work across AWS Secrets Manager, MariaDB Galera, and Azure confidential computing to support government clients.

Qualifications

• Bachelor’s degree in CS/Engineering and 15+ years of software experience.
• Proven PKI design, development, and lifecycle management.
• Experience configuring PKI tools like EJBCA and integrating with services.
• Java-based GUI and backend development experience.

Responsibilities

• Design, implement, and test scalable full stack Java applications.
• Integrate with vendor RESTful APIs and secure key storage.
• Develop MariaDB-backed PKI structures and audit logging.
• Build intuitive GUIs for certificate workflows.
• Implement PKI protocols per IETF RFCs.
• Automate PKI tooling with EJBCA across environments.
• Coordinate backlog and cross-functional integration.
• Work with AWS Secrets Manager and Azure confidential computing.
• Engage with industry groups and government stakeholders.

Skills

Java

PKI expertise

GUI design

Hibernate/JPA

Spring Boot

Cloud security

AWS Secrets Manager

Education

Bachelor’s degree in CS/Engineering

Tools

EJBCA

HSM

TPM

MariaDB Galera

Secrets Manager

Job description

Support and advance enterprise cybersecurity engineering for the National Airspace System (NAS), with a focus on Public Key Infrastructure (PKI) and certificate lifecycle management.

You will apply hands‑on Java development expertise to design, build, and maintain PKI systems and security tooling, including integration with certificate authority platforms such as EJBCA, supporting certificate issuance, validation, and lifecycle management across diverse operational environments.

This role also involves working with relational databases (MariaDB with Galera clustering preferred), cloud platforms (AWS, including Secrets Manager; and Azure, with confidential computing experience a plus), and cryptography, including post‑quantum cryptography (PQC). Experience working with government clients is preferred.

Concepts Beyond provides Software Engineering, Systems Engineering, and Aviation expertise to develop advanced Air Traffic Management concepts; develops cybersecurity solutions in PKI, post‑quantum computing, zero trust & confidential computing; Develops AI/ML and cloud computing tools for Aviation Safety & Data Analytics.

Key Responsibilities

• Java Application Development: Design, implement and test scalable full stack java applications. Develop automation integration with vendor RESTful APIs. Apply BouncyCastle, Hibernate/JPA, and Spring Boot. Integrate with secure key storage such as HSM, TPM and AWS Secrets Manager.
• Database & Backend Development: Design, query, and maintain relational and other database structures (MariaDB with Galera clustering preferred) supporting PKI operations, certificate metadata, audit logging, and application backend functionality, ensuring data integrity, performance, and reliable integration with front‑end and certificate management components.
• GUI Development: Design and develop intuitive, user‑friendly graphical user interfaces (GUIs) to support certificate management workflows and administrative tooling, translating complex PKI and system configuration processes into accessible, efficient user experiences for technical and non‑technical stakeholders alike.
• PKI Protocol Implementation: Analyze PKI standards, including IETF RFCs, and implement solutions to securely integrate protocols into the certificate management architecture.
• PKI Systems & Certificate Lifecycle Management: Apply PKI expertise to the design, development, and maintenance of software systems supporting digital certificate issuance, validation, and lifecycle management, ensuring implementations align with security best practices, industry standards, and evolving certificate authority requirements across diverse operational environments.
• PKI Tooling & Automation (EJBCA): Configure diverse system environments and automate PKI tools and platforms such as EJBCA to support certificate authority operations, certificate profiles, end‑entity management, and integration with dependent applications and services.
• Backlog & Integration Management: Review and prioritize high‑priority integration actions from the development backlog, coordinating with cross‑functional teams to plan and execute software integration efforts involving digital certificates, EJBCA, and related PKI tooling, and ensure timely resolution of integration issues in support of project schedules and operational requirements.
• Cloud & Cryptography Engineering: Build and secure solutions on AWS (including Secrets Manager) and Azure, applying cryptography and PKI best practices; experience with post‑quantum cryptography (PQC) and Azure confidential computing is a plus.
• Industry Engagement & Outreach: Contribute to working groups and standards bodies, and represent the organization externally through publications, conference presentations, and panel participation.
• Strategic Insight & Opportunity Identification: Stay current on government and industry activities to identify emerging trends, gaps, and innovation opportunities. Contribute ideas that support growth and new business opportunities.

Requirements

• Bachelor’s degree in Computer Science, Engineering, or a related field, plus 15+ years of relevant software engineering experience.
• Experience applying PKI expertise to the design, development, and maintenance of software systems supporting digital certificate issuance, validation, and lifecycle management.
• Experience configuring and automating PKI tools and platforms such as EJBCA, including certificate profiles, end‑entity management, and integration with dependent applications and services.
• Experience with relational and other database systems, designing and maintaining data structures supporting PKI operations, certificate metadata, audit logging, and backend functionality.
• Experience designing and developing Java‑based GUIs for certificate management workflows and administrative tooling.
• Experience reviewing and prioritizing development backlog items and coordinating cross‑functional integration efforts involving digital certificates, EJBCA, and related PKI tooling.
• AWS experience, including Secrets Manager.
• Cryptography and PKI experience.

Preferred Qualifications

• Database experience with MariaDB, Galera clustering preferred.
• Experience working with government clients.