PKI Engineer

This is a fully remote position, open to applicants in Maryland.

📋 Description

• Design, implement, and oversee automated workflows for certificate issuance, renewal, and revocation utilizing the ACME protocol and RESTful APIs.

• Manage enterprise CA hierarchies, including Root, Issuing, and Subordinate CAs, across platforms such as Red Hat CS or EJBCA.

• Ensure adherence to DoW STIG and FIPS security standards in conjunction with HSM integration.

• Create and maintain scripts and tools using Bash and Perl or Python to enhance operational efficiency.

• Work collaboratively with security, architecture, and development teams to ensure the secure design of systems and applications.

• Document system configurations, operational processes, and troubleshooting guides.

• Engage in system upgrades, migrations, and initiatives aimed at continuous improvement.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Engineering, or a related field.

• Possession of Secret Clearance.

• A minimum of five (5) years of experience with X.509 certificates, SSL/TLS, asymmetric cryptography, and HSM/KMS integration.

• Strong experience in administering Red Hat Linux systems.

• Practical experience in configuring ACME clients/servers, SCEP, EST, and REST APIs.

• Proficient in scripting with Bash and Perl or Python.

• Excellent written and verbal communication skills for documentation and teamwork.

• Significant experience with configuration management and automation tools, specifically Ansible and Red Hat Satellite.

• Proven ability to troubleshoot intricate system and application challenges across various layers of the stack.

• Experience with LDAP, particularly in non-Active Directory LDAP implementations.

• Familiarity with PostgreSQL and MariaDB database platforms.

• Background in cryptographic engineering, including secure key management and the implementation or integration of cryptographic protocols.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage.

• Paid holidays.

• Paid Time Off (PTO).

• 401k plan with company matching.