Infra & Architecture Engineer

Role: Infra & Architecture Engineer

Location: Reston, VA (Onsite)

Duration: 12+ Months (Extension possible)

Job Summary:

Client s Information Systems & Technology organization is seeking a Senior Public Key Infrastructure (PKI) Engineer to support the architecture, implementation and operations of enterprise level PKI as part of the identity and access management team. This role will focus on building and maintaining certificate lifecycle management systems, including issuance, renewal, revocation and auditing of the certificates and keys; developing strategies for disaster recovery; offering technical support to users; and ensuring compliance with regulations and policies.

This is an excellent opportunity to work as an SME for Private and Public Key Infrastructure with a wide variety of technologies in a fast-paced global environment. In this role you will leverage a strong understanding of PKI to quickly adapt to the environment and make an impact. The role works collaboratively within a team of Identity Engineers following global processes, performing and/or assisting with core job responsibilities including:

• Overall security, reliability, and management of PKI
• Experience deploying or maintaining Active Directory Certificate Services, GlobalSign, Sectigo, Digicert, Keyfactor, OpenSSL or other certificate management platforms.
• Firm understanding of and configuring Online Certificate Status Protocol (OCSP), Certificate Authorities (CA), Registration Authorities (RA), Certificate Revocation List (CRL), Bring Your Own Key (BYOK)
• Firm understanding of cryptographic concepts including symmetric/asymmetric cryptography, hash algorithms, digital signatures, encryption, etc.
• Comprehensive understanding of the PKI/HSM ecosystem, including technology, standards, implementations, and migration strategies.
• Ensure digital certificate services provided align with Bechel s and industry best practices.
• Support, implement and design PKI cross functional integrations:
• Installation of SSL certificates in Windows IIS, JAVA JKS, Unix/Linux, Apache, Tomcat, Azure Key vault, AWS, F5's etc.
• Understanding of ACME protocol and its functionality
• Experience with developing scripts for administrative and automation tasks

Basic Qualifications:

• Recognized degree in Computer Science or Information Technology from an accredited college or university, or specialized courses in networking, information technology, server administration and infrastructure operations, or equivalent work experience in a related field.
• Bachelor's or Master's degree (or international equivalent) and a minimum of 8 - 10 years of relevant experience or 12 - 14 years of relevant work experience in lieu of a degree
• Windows/Linux System Administration
• Relevant Microsoft certifications are also highly desirable

Minimum Qualifications:

• Excellent technical communication, writing, meeting facilitation and presentation skills.
• Self-driven and resourceful to achieve goals independently as well as motivate the group to deliver technical excellence and quality of service.
• Flexibility to adjust to changing requirements, schedules, and priorities
• Ability to learn and adapt to new technologies, present proof of concepts
• Time management skills with a focus on quality service and deliverables
• Ability to comprehend and effectively translate customer requirements into technical solutions
• Ability to create documentation and process diagrams for support personnel