Cybersecurity PKI Engineer

Booz Allen Hamilton•San Antonio, TX

1d•$86,900 - $198,000•Remote

About The Position

The Cybersecurity PKI Engineer will be responsible for developing and maintaining secure, scalable, and highly available PKI solutions aligned with Navy and DoW standards and long-term technology strategy. The candidate will maintain accurate PKI documentation, including certificate inventories, system configurations, architectural diagrams, operational procedures, and technical standards. They will evaluate, recommend, and support the implementation of new technologies, tools, products, and processes that enhance the PKI environment and overall operational efficiency. A successful candidate will partner with engineers, security teams, infrastructure teams, vendors, and business stakeholders to define, design, and deliver solutions that meet operational and technical requirements.

Requirements

5+ years of experience with PKI cybersecurity
3+ years of experience with Active Directory Certificate Services
Experience implementing and maintaining security best practices
Experience with certificate authority design, setup, and operations
Experience with certificate lifecycle management and automation
Knowledge of certificate policies and certificate contents
Knowledge of Linux systems and asymmetric cryptography concepts and applications
Secret clearance
HS diploma or GED

Nice To Haves

Experience with Keyfactor and Venafi
Experience implementing ACME and SCEP processes
Knowledge of certificate policy and certification practice statements
Security+ Certification

Responsibilities

Developing and maintaining secure, scalable, and highly available PKI solutions aligned with Navy and DoW standards and long-term technology strategy.
Maintaining accurate PKI documentation, including certificate inventories, system configurations, architectural diagrams, operational procedures, and technical standards.
Evaluating, recommending, and supporting the implementation of new technologies, tools, products, and processes that enhance the PKI environment and overall operational efficiency.
Partnering with engineers, security teams, infrastructure teams, vendors, and business stakeholders to define, design, and deliver solutions that meet operational and technical requirements.