PKI Engineer with Top Secret/Q Clearance

Position: PKI Engineer with (Top Secret/Q Clearance)

100% Remote role

Fulltime/Permanent

Experience: 5+ yrs.

Clearance Level: Top Secret/Q clearance. (this is must)

Key Responsibilities:

• Architect, deploy, administer, and maintain enterprise PKI environments and Certificate Authority (CA) infrastructure, including Microsoft Active Directory Certificate Services (AD CS).
• Design and manage enterprise server certificate strategies across Windows, Linux, virtualization, cloud, web services, APIs, and load balancers.
• Automate certificate lifecycle management (issuance, renewal, revocation, expiration monitoring, key rotation, reporting) using ACME, SCEP/EST, REST APIs, PowerShell, Python, Bash, Ansible, or Terraform.
• Integrate PKI services with Active Directory, Azure, AWS, virtualization platforms, and DevSecOps pipelines.
• Ensure PKI environments comply with NIST, FIPS, DISA STIGs, and RMF requirements.
• Provide technical leadership and mentorship to junior engineers.

Requirements:

• U.S. Citizen with an active Top Secret/Q clearance;
• Hybrid working
• Experience administering AD CS or comparable enterprise PKI platforms.
• Experience automating certificate lifecycle management at scale.
• Experience administering Windows Server and/or Linux.
• Strong understanding of X.509, CRL/OCSP, enterprise trust models, cryptographic algorithms, and key management.
• Excellent analytical, problem-solving, and communication skills.