PKI Engineer, Senior

Job description

The PKI Engineer, Senior designs, implements, and operates enterprise Public Key Infrastructure services that underpin secure authentication, encryption, and digital signatures across mission‑critical systems. The role serves as the primary technical authority for certificate lifecycle management, key management, and trust architectures spanning on‑premises and cloud environments. The engineer defines PKI standards, policies, and integration patterns for applications, devices, and identities, and leads troubleshooting, modernization, and automation initiatives to keep cryptographic services resilient, scalable, and audit‑ready in a highly regulated federal IT environment. Key Responsibilities: - Architect and maintain enterprise PKI solutions, including certificate authorities, registration authorities, OCSP/CRL distribution, and hardware security modules, ensuring high availability and crypto‑agility. - Oversee end‑to‑end certificate lifecycle management for users, services, devices, and workloads, including automated issuance, renewal, revocation, and inventory across hybrid and multi‑cloud environments. - Design PKI trust models and integration patterns for TLS/SSL, S/MIME, code...