PKI & Identity Infrastructure Engineer (FAA Enterprise Services)
About The Position
Concept Solutions is seeking a PKI & Identity Infrastructure Engineer (FAA Enterprise Services) supporting one of the nation’s most complex enterprise environments. We are seeking a highly skilled Senior PKI & Identity Infrastructure Engineer to serve as a technical authority across enterprise Public Key Infrastructure (PKI), identity services, directory systems, Linux/Windows administration, and secure cryptographic operations. This role is ideal for an advanced systems engineer who thrives in high-security, large-scale federal environments and is passionate about securing enterprise authentication, certificate lifecycle management, and infrastructure resilience. You will play a key role in supporting secure digital trust across the FAA while collaborating with cybersecurity, infrastructure, and business stakeholders.
Requirements
- Bachelor’s degree in Information Systems, IT Management, Business Systems, MIS
- 5+ years or an additional 4+ years of relevant experience in lieu of an BS degree
- Advanced experience supporting enterprise PKI services in large-scale environments
- Strong expertise with Windows Server, Red Hat Enterprise Linux, and secure systems administration
- Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL
- Hands-on experience with HSM technologies (Thales, Luna, or equivalent)
- Knowledge of Docker/containerized infrastructure
- Experience with IIS, Apache, JBoss, PostgreSQL, and MariaDB
- Familiarity with federal cybersecurity, compliance, or FAA enterprise environments highly preferred
Responsibilities
- Serve as a senior technical lead for enterprise PKI architecture, administration, and operational support across Certification Authorities (CAs), Registration Authorities (RAs), and Validation Authorities (VAs)
- Administer and maintain PKI platforms across Windows and Linux environments, including EJBCA operations, ACME, SCEP, certificate enrollment, CRL distribution, OCSP, CDP, and AIA services
- Execute and document PKI key ceremonies, offline root CA operations, and cryptographic material handling in compliance with Certificate Policies (CP) and Certification Practice Statements (CPS)
- Manage and maintain Hardware Security Modules (HSMs), including Thales and Luna platforms, ensuring compliance with federal cryptographic standards
- Support secure certificate lifecycle management, validation services, and enterprise trust models
- Administer Red Hat Enterprise Linux (RHEL) environments supporting PKI, identity, and application services including patching, hardening, authentication integration, and compliance
- Perform comprehensive Microsoft Windows Server administration including lifecycle management, patching, WSUS/Tanium baselines, hardening, backup validation, and remediation
- Support Docker/containerized solutions aligned with enterprise deployment and security standards
- Maintain supporting web/application infrastructure including IIS, Apache, and JBoss
- Support PostgreSQL and MariaDB environments for PKI and identity services
- Perform maintenance, backup validation, availability monitoring, and operational troubleshooting
- Ensure service reliability using SLA/SLO/SLI performance principles
- Develop and maintain SOPs, architecture diagrams, lifecycle documentation, audit artifacts, and operational procedures
- Partner with cybersecurity teams, FAA stakeholders, Lines of Business, and enterprise customers to support mission requirements
- Present technical solutions clearly to both technical and non-technical stakeholders
- Support compliance, audit readiness, and continuous service improvement
Benefits
- health insurance
- dental insurance
- vision insurance
- life insurance
- 401(k) plan with matching
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
