PKI Management Engineer at Sev1tech, Inc. in Rosslyn, Virginia

Job Description:

Sev1tech, Inc.


PKI Management Engineer

US-VA-Rosslyn

Job ID: 2025-8751
Type: Full Time W/Benefits Ret Match
# of Openings: 1
Rosslyn, VA

Overview

We are seeking a highly skilled and motivated Public Key Infrastructure (PKI) Management Engineer to join our DHS CISA team. As a PKI Engineer, you will be responsible for the design, implementation, and maintenance of DHS CISA’s PKI systems. Your primary focus will be on ensuring the security, scalability, and reliability of our PKI infrastructure, which underpins our organization's digital certificate management, encryption, and authentication processes.

 

Responsibilities

• Design, implement, and maintain the organization's PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and Certificate Revocation Lists (CRLs).
• Manage the lifecycle of digital certificates, from issuance to renewal and revocation, ensuring compliance with industry standards and security best practices.
• Collaborate with cross-functional teams to integrate PKI services into various applications, systems, and network environments.
• Troubleshoot and resolve issues related to certificate provisioning, validation, and chain of trust.
• Conduct regular audits and vulnerability assessments to identify potential security risks and recommend mitigation strategies.
• Stay updated with emerging PKI technologies, industry trends, and cryptographic protocols to enhance the organization's security posture.
• Provide expertise and guidance in PKI-related matters to internal teams and stakeholders.
• Participate in on-call rotations to address urgent PKI incidents and maintain high availability of PKI services.

Responsibilities

• Bachelor's degree in Computer Science, Information Security, or related field (Master's preferred).
• 3-7 years of proven experience as a PKI Engineer, Security Engineer, or similar role.
• Strong understanding of cryptographic concepts, including encryption, digital signatures, and hashing algorithms.
• Proficiency in deploying and managing PKI components such as CAs, RAs, and Online Certificate Status Protocol (OCSP) responders.
• Familiarity with industry standards like X.509, SSL/TLS, and relevant RFCs.
• Hands-on experience with PKI management tools and software, such as OpenSSL, Microsoft ADCS, or EJBCA.
• Knowledge of network and security technologies, including firewalls, IDS/IPS, and network protocols.
• Excellent problem-solving skills and the ability to work effectively in a collaborative team environment.
• Professional certifications like CISSP, CompTIA Security+, or Certified PKI Professional (CPKI) are a plus.

Qualifications

Must be able to provide proof of U.S. Citizenship and be able to obtain a DHS clearance with CISA

Other Duties: Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

 

Clearance Preference:

• DHS EOD - 1st priority
• Any DHS badge + DoD Top Secret or Secret - 2nd choice
• DoD Secret or Top Secret + willingness to get EOD clearance - 3rd choice (it can take 45 days to obtain EOD clearance – work can only begin once the clearance is fully adjudicated)

Equal employment opportunity, including veterans and individuals with disabilities.

PI266072315

Salary:

$158,000.00

Apply Now