PKI Engineer

Capital Technology Group

6d•$100,000 - $130,000•Remote

About The Position

CTG is seeking a PKI Engineer to implement and maintain enterprise Public Key Infrastructure (PKI) services supporting mission-critical federal systems. This role is ideal for an engineer with expertise in PKI platforms and managing Hardware Security Modules across complex, highly secure environments.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field (or equivalent experience)
4+ years of professional experience in PKI engineering, cybersecurity engineering, identity and access management (IAM), infrastructure/security engineering, or enterprise platform engineering
Experience with PKI platforms (Entrust, Digicert, Venafi, Let's Encrypt).
Experience with Hardware Security Modules (HSMs).
Experience with cloud platforms such as AWS and/or Azure.
Applicants must be U.S. Citizens
Ability to obtain a Public Trust clearance

Nice To Haves

Experience with Microsoft Certificate Services.
Experience with PKI/certificate management products.
Familiarity with PIV authentication and identity governance solutions.
Experience supporting highly regulated environments, including federal or public sector organizations.
Relevant cloud, security, or architecture certifications.

Responsibilities

Implement, and maintain PKI architecture according to technical requirements and guidance of PKI SME.
Build and maintain CI/CD pipelines using Jenkins and/or Harness.
Automate provisioning and configuration of Windows and Linux infrastructure supporting PKI.
Manage containerized workloads using Docker, Helm, Kubernetes, and EKS.
Administer AWS infrastructure including EC2 and RDS.
Provide user support for certificate lifecycle.