PKI Engineer

Booz Allen Hamilton•Oklahoma City, OK

1d•$86,900 - $198,000

About The Position

The Cybersecurity Public Key Infrastructure (PKI) Engineer develops and maintains secure, scalable, and highly available PKI solutions aligned with Navy and Department of War standards and long-term technology strategy. The role maintains accurate PKI documentation, including certificate inventories, system configurations, architectural diagrams, operational procedures, and technical standards. The engineer evaluates, recommends, and supports implementation of technologies, tools, products, and processes to enhance the PKI environment and operational efficiency. The position partners with engineers, security and infrastructure teams, vendors, and business stakeholders to define, design, and deliver solutions that meet operational and technical requirements. Travel of up to 25% is required. Applicants must hold a Secret clearance and a high school diploma or GED. The position offers an annualized projected compensation range of $86,900 to $198,000. Booz Allen describes benefits including health, life, disability, financial, and retirement benefits; paid leave; professional development; tuition assistance; work-life programs; dependent care; and recognition awards. Full-time and part-time employees regularly working at least 20 hours per week are eligible for the company's benefit programs, subject to stated eligibility terms.

Requirements

At least 5 years of cybersecurity experience, including PKI.
At least 3 years of experience with Active Directory Certificate Services.
Experience implementing and maintaining security best practices.
Experience with certificate authority design, setup, and operations.
Experience with certificate lifecycle management and automation.
Knowledge of certificate policies and certificate contents.
Knowledge of Linux systems and asymmetric cryptography concepts and applications.
Ability to travel up to 25% of the time.
Secret clearance.
High school diploma or GED.

Nice To Haves

Experience with Keyfactor and Venafi.
Experience implementing ACME and SCEP processes.
Knowledge of certificate policy and certification practice statements.
Security+ certification.

Responsibilities

Develop and maintain secure, scalable, highly available PKI solutions aligned with Navy and DoW standards and long-term technology strategy.
Maintain PKI documentation, including certificate inventories, system configurations, architectural diagrams, operational procedures, and technical standards.
Evaluate, recommend, and support implementation of technologies, tools, products, and processes that improve the PKI environment and operational efficiency.
Partner with engineers, security teams, infrastructure teams, vendors, and business stakeholders to define, design, and deliver solutions that meet operational and technical requirements.