PKI & Identity Infrastructure Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as a senior technical authority for enterprise PKI architecture, administration, and operational support across Certification Authorities (CAs), Registration Authorities (RAs), and Validation Authorities (VAs)

• Oversee and manage PKI platforms in both Windows and Linux environments, including operations for EJBCA, ACME, SCEP, certificate enrollment, CRL distribution, OCSP, CDP, and AIA services

• Conduct and document PKI key ceremonies, offline root CA activities, and cryptographic material handling in accordance with Certificate Policies (CP) and Certification Practice Statements (CPS)

• Administer and maintain Hardware Security Modules (HSMs) to ensure adherence to federal cryptographic standards

• Facilitate secure certificate lifecycle management, validation services, and enterprise trust models

• Manage Red Hat Enterprise Linux (RHEL) environments that support PKI, identity, and application services

• Execute thorough Microsoft Windows Server administration including lifecycle management, patching, backup validation, and remediation

• Assist with Docker/containerized solutions that align with enterprise deployment and security protocols

• Maintain supporting web/application infrastructure such as IIS, Apache, and JBoss

• Provide support for PostgreSQL and MariaDB environments related to PKI and identity services

⛳️ Requirements

• Bachelor’s degree in Information Systems, IT Management, Business Systems, or MIS

• 5+ years of relevant experience or an additional 4+ years of applicable experience in lieu of a BS degree

• Extensive experience in supporting enterprise PKI services within large-scale environments

• Strong proficiency with Windows Server, Red Hat Enterprise Linux, and secure systems administration

• Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL

• Practical experience with HSM technologies (Thales, Luna, or equivalent)

• Understanding of Docker/containerized infrastructure

• Familiarity with IIS, Apache, JBoss, PostgreSQL, and MariaDB

• Preference for candidates with knowledge of federal cybersecurity, compliance, or FAA enterprise environments.

🏝️ Benefits

• Health, dental, vision, and life insurance

• Comprehensive 401(k) plan with matching and immediate vesting