PKI, Computer, Computer-aided software engineering, Configuration, Consulting, Directory Services, Bash, Business requirements, Change control, Communication skills, Compliance, .NET, ADA, Active Directory, Agile, Architecture, Authentication, Automation, Network design, Network management, Networking, Nmap, OAuth, OS X, Issue tracking, LDAP, Leadership, Linux, Microsoft Windows, Mobile, Monitoring, IT, IT infrastructure, IT security, Identity management, Implementation, Infrastructure, Education, Encryption, Engineering, FLSA, Governance, HSM, Hardware, Operating systems, Operations, Planning, Policies, System administration, System on a chip, Service management, Solution management, Specification, Supervision, TCP/IP, SCEP, SSO, Scripting, Secure Shell, Security, Security clearance, Software, Project management, Provisioning, Recovery, Reporting, Virtualization, Windows PowerShell, SAML, SAP BASIS, Troubleshooting, Unix, Upgrades, VMware, VPN
Full Time
$80,000 - $180,000
Travel required to 25%.

Job Description

Job Description

Job Title: PKI Engineer

Department: DCHQ

Reports To: PM Contractor Site

Supervisory Role: No

FLSA Status: Exempt



Job Summary

Digital Cloak is seeking a Public Key Infrastructure (PKI) Engineer to support our Enterprise PKI service. The candidate will apply their experience in PKI to support systems infrastructure, hardware, and software, including analysis, planning, design, development, implementation, provisioning, upgrade and day-to-day operations.



Essential Job Functions:

  • Implement PKI infrastructure within the organization
  • Consult with other members of project team and end users to identify PKI requirements and develop requirements documentation
  • Contribute to the technical direction on all areas of PKI architecture, including policies, standards strategies, automation and governance
  • Provide guidance to key stakeholders on PKI lifecycle, processes and procedures
  • Computer security, specifically in Windows/MacOS/Linux OS environment
  • Monitoring systems and processes, performing system health checks, maintaining system logs, and troubleshooting of system problems including hardware, application and operating system related issues
  • System/network certificate management
  • Mobile code signing implementation
  • Signature signing solution
  • Management of all certificates and keys, including providing private key recovery and certificate revocation functionality
  • Implement certificate-based authentication for both logical and physical access
  • Successfully adhere to implementation schedules for system deployments and improvements following defined change control processes
  • Ability to brief senior leadership on all PKI related projects and events


Required Knowledge, Skills, Abilities

  • Understanding of Agile methodology
  • Experience with ticketing Service Manager or other ticketing systems
  • Strong communication skills in dealing with IT developers, system administrators, and users
  • Experience configuring SCEP across third party applications
  • Experience with certificate management tools
  • Experienced in digital certificate management processes and lifecycle
  • 10+ years of experience with IT infrastructure in some or all of the following disciplines: Systems Administration (Windows, Unix OS), Network administration, Active Directory and/or Virtualization(VMWare)
  • PowerShell or bash scripting experience preferred
  • Experience in TCP/IP networking including troubleshooting tools (e.g., netstat, ping, nmap, ncat, p0f, ssh, traceroute) and basic network design
  • Experience with directory services, such as Active Directory, Open LDAP, etc.


Required Education, Certifications/ Licenses, Related Experience

  • Bachelor’s degree
  • 5+ years of experience with enterprise class PKI technologies
  • 3 years of work experience in services consulting delivering PKI projects for clients
  • 5 - 7 years of professional work experience in a related field such as Public Key Infrastructure, Infrastructure IT (Systems Administration, Network Administration Windows/Linux OS, Network Administration, Active Directory and/or Virtualization).
  • OR any equivalent combination of education and experience


Preferred  Education, Certifications/ Licenses, Related Experience

  • VPN, PKI/PKE, and various encryption frameworks and models
  • HSM Management
  • Network Infrastructure
  • Managed Security Services SOC Functions
  • Identity & Access Management (SSO, SAML, Oauth, etc.)
  • Security Orchestration and Automation
  • Virtualization
  • Governance, Risk, & Compliance
  • Project Management
  • Microsoft PKI and EJBCA


Physical Job Requirements

  • This position requires the ability to remain in a stationary position (standing and/or seated) more than half the time
  • This position requires the ability to spend more than half the time viewing computer monitors

Clearance Requirements

  • ship is required
  • The ability to obtain and maintain a Top-Secret Clearance with SCI Eligibility.


Primary Work Location: Stafford, VA


Travel Requirements: This position has travel requirements up to 20%


Other Duties: This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.


Disability Specifications: Digital Cloak will make reasonable accommodations in accordance with the Americans with Disabilities Act of 1990


Digital Cloak is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status.  Digital Cloak is committed to working with and providing reasonable accommodation to individuals with physical and mental disabilities.  If you need special assistance or an accommodation while seeking employment, please email   We will make a determination on your request for reasonable accommodation on a case-by-case basis

Dice Id : 90969076
Position Id : 6863301
Originally Posted : 2 months ago
Have a Job? Post it

Similar Positions

PKI Security Administrator
  • Morrisville, NC, USA
Sr. PKI Engineer , CASA GRANDE, AZ / Newark, CA
  • United Software Group
  • Newark, NJ, USA
Software Engineer
  • Digital Cloak
  • Stafford, VA, USA
Software Design Engineer
  • Digital Cloak
  • Stafford, VA, USA
Senior PKI Security Engineer
  • Depository Trust
  • Tampa, FL, USA
Senior PKI Security Engineer
  • YD Technology Solutions Inc.
  • Tampa, FL, USA
Cyber Security Architect/Engineer II
  • Cogent IBS, Inc
  • Eagan, MN, USA
PKI Security Administrator
  • Eagan, MN, USA
IAM Engineer-PKI
  • Motion Recruitment
  • Phoenix, AZ, USA