PKI Engineer, Senior

The PKI Engineer, Senior designs, implements, and operates enterprise Public Key Infrastructure services that underpin secure authentication, encryption, and digital signatures across missionu2011critical systems. The role serves as the primary technical authority for certificate lifecycle management, key management, and trust architectures spanning onu2011premises and cloud environments. The engineer defines PKI standards, policies, and integration patterns for applications, devices, and identities, and leads troubleshooting, modernization, and automation initiatives to keep cryptographic services resilient, scalable, and auditu2011ready in a highly regulated federal IT environment. Key Responsibilities + Architect and maintain enterprise PKI solutions, including certificate authorities, registration authorities, OCSP/CRL distribution, and hardware security modules, ensuring high availability and cryptou2011agility. + Oversee endu2011tou2011end certificate lifecycle management for users, services, devices, and workloads, including automated issuance, renewal, revocation, and inventory across hybrid and multiu2011cloud environments. + Design PKI trust models and integration patterns for TLS/SSL, S/MIME, code signing, VPN, Wiu2011Fi, and device authentication in support of zerou2011trust access and strong identity assurance. + Implement and enforce PKI security policies, certificate policies, and certification practice statements, aligning configurations with applicable government and industry cryptographic standards. + Build PowerShell or Python automation, APIs, and tooling to streamline PKI operations, monitoring, key rotation, and compliance reporting at enterprise scale. + Lead incident response for certificateu2011related outages or compromises, including rapid revocation, reu2011issuance, key rotation, and coordination with security operations and incident response teams. + Collaborate with identity, network, and application security architects to embed PKI requirements into new platforms and remediate legacy or nonu2011compliant cryptographic implementations. + Guide risk assessments and audits focused on cryptographic controls, producing remediation roadmaps to address algorithm deprecation, weak ciphers, and endu2011ofu2011life PKI components. Required Qualifications + Bacheloru2019s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent relevant experience. + 8+ years of experience in cybersecurity engineering or closely related roles, including at least 5 years focused on PKI architecture and operations. + Strong background in cybersecurity, network security, and information systems, with deep understanding of standardsu2011based security architectures, identity services, and device profiling. + Demonstrated expertise with enterprise PKI platforms, certificate lifecycle management, hardware security modules, and related tooling across onu2011prem and cloud environments. + Proficiency with automation and scripting (such as PowerShell or Python) to manage PKI operations, monitoring, and reporting at scale. + Excellent problemu2011solving, analytical, communication, and interpersonal skills, with the ability to manage multiple initiatives and incident responses effectively. + Ability to obtain and maintain a SECRET clearance; U.S. citizenship required. + Less than 10% travel required. Preferred Qualifications + Experience engineering PKI for large federal or defense environments, including integration with smart cards, PIV/CAC, and enterprise identity governance platforms. + Professional certifications such as CISSP, CCSP, or vendor PKI/cryptography credentials demonstrating advanced knowledge of applied cryptography and key management. + Experience leading cryptographic modernization programs (for example, algorithm migrations, keyu2011length upgrades, or postu2011quantumu2011readiness initiatives). + Familiarity with zerou2011trust architectures and how PKI enables strong device, user, and service identity within those models. Compensation Ranges Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees. EEO Requirements It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies. All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment. Physical Requirements The physical requirements described in

Created: 2026-04-22