755 pki engineer jobs at 348 companies in United States
2mo
Save
Mark Applied
Hide
2mo
Identity Security - PKI Engineer
Santa Clara or Phoenix
$105k-$149k/yrOnsiteFull Time
IntelNasdaq: INTC: Designs and manufactures microprocessors and semiconductor components.
3+ YOEDesign, deploy, and manage PKI; lifecycle management; automation; collaborate with security and DevOps; ensure policy enforcement and compliance.
PKI, Active Directory, DoD STIG, Windows scripting, UNIX scripting, SQL Server, HTML, JavaScript, JSP, XML, XSL
EY: Global firm providing audit, tax, and professional consulting services.
Deep expertise in PKI and certificate lifecycle management, knowledge of PKI vendors/technologies, cryptographic protocols, requirements analysis, and strong verbal and written communication.
Microsoft Active Directory Certificate Services, Network Device Enrollment Service (NDES), Online Certificate Status Protocol (OCSP), Thales Luna Hardware Security Module (HSM), Venafi Trust Protection Platform, Venafi TrustForce, Venafi Trust Authority, Intune Certificate Connector, ServiceNow
Quincy or Berwyn or Princeton or Clifton or Austin
$90k-$158k/yrOnsiteFull Time
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
3+ YOE3+ years PKI/security engineering or infrastructure automation experience; knowledge of TLS/SSL, certificate lifecycle, scripting/automation, integrations, and troubleshooting.
ServiceNow, PowerShell, Python, APIs, Keyfactor, DigiCert, Microsoft ADCS, Windows, Linux
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
6+ YOEDesign and deploy enterprise PKI; administer Venafi, Luna HSM and certificate platforms; monitor/configure systems; support Windows Server/VMware/Unix/Linux; participate in on-call rotation.
Microsoft PKI, Venafi, Luna HSM, Windows Server, VMware, Unix, Linux
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
5+ YOEPKI deployment, Python, Perl, or Base, Red Hat Certificate System, Dogtag PKI, or EJBCA, technical documentation, secure PKI web applications, Secret clearance, DoD 8570 certification, and 5+ years of systems or network administration with a bachelor's degree.
Python, Perl, Base, Red Hat Certificate System, Dogtag PKI, EJBCA, Java, AWS, ActivClient
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
5+ YOE5+ years in information security focused on PKI and identity infrastructure; PKI components, certificate automation, DoD RMF, eMASS, Secret clearance, technical bachelor's degree, and DoD 8140 certification required.
AWS, Microsoft Azure, Google Cloud Platform (GCP), Bash, Python, PowerShell, DevOps, Agile, eMASS, Public Key Infrastructure (PKI)
Fort Meade or Montgomery County or Prince George's County
HybridFull Time
August Schell: Cybersecurity and data engineering services for federal agencies.
5+ YOERequires 5+ years of systems or operations engineering, Linux/RHEL administration, PKI operations, scripting, active Secret clearance, and DoD 8570/8140 IAT Level II certification.
Red Hat Certificate System (RHCS), RHEL, ACME, Entrust nShield, Thales Luna, Python, Bash, Podman, Docker, KVM, Dogtag PKI, EJBCA, Microsoft AD CS, Entrust Authority, ISC CertAgent, Ansible, Prometheus, Grafana, ELK, JIRA, LDAP, ML-DSA/Dilithium, Kyber, CNSA 2.0, Scrum
CapgeminiEuronext Paris: CAP: Provides global IT consulting and digital transformation services.
5+ YOE5+ years PKI/HashiCorp operations experience, strong cryptography and secrets management skills, bachelor's degree or equivalent experience, certifications preferred, excellent communication and problem-solving.
BruckEdwards: Provides IT modernization and identity management for federal agencies.
10+ YOEU.S. citizen with active Top Secret clearance, 10+ years IT/cybersecurity experience, PKI and Red Hat Linux expertise, DoD 8570 IAT Level II (e.g., GSEC or Security+), bachelor’s degree or equivalent, virtualization and automation experience.
Red Hat Linux, Red Hat Certificate Systems, EJBCA, Hardware Security Module, KVM, VMware, Ansible
Freddie MacOTCQB: FMCC: Purchases and securitizes home mortgages for the secondary market.
5+ YOERequires 5+ years in PKI and cryptography, 5–7+ years in IT security, Linux and Windows operations, security controls, cloud security, automation, troubleshooting, and cross-functional collaboration.
AGE Solutions: Technology consulting and IT services for government agencies.
8+ YOEBachelor's degree, 8+ years PKI/cryptography and DoD IT security experience, current DoD Secret clearance, deep X.509/PKI knowledge, OS expertise, and preferred infosec certifications (CISSP/CISM/CEH).
Microsoft CAPI, Microsoft CAPI NextGen, NSS, OpenSSL, Windows, Linux, Unix, MacOS
DTCC: Provides post-trade infrastructure for the global financial services industry
10+ YOEMinimum 10 years of related experience; bachelor's degree preferred or equivalent experience; deep PKI, certificate authority, cryptographic protocol, trust architecture, cloud security, and enterprise security architecture expertise.
Public Key Infrastructure (PKI), Post-quantum cryptography (PQC)
General Dynamics Information TechnologyNYSE: GD: Provides mission-critical IT services to government and defense organizations.
5+ YOETop Secret clearance required (Top Secret/SCI obtainable), US citizenship, DoD 8140 IAT II compliant, 5+ years related experience, bachelor's in CS/CE/IT (or equivalent experience), PKI/CA/HSM experience, scripting with PowerShell or Python.
True Zero Technologies: A veteran-owned technology services delivering cybersecurity and technology solutions.
Requires a bachelor's degree and enterprise PKI experience, including X.509, certificate lifecycle automation, AWS Private CA, AWS CloudHSM, IAM, mTLS, cryptography, TLS, and regulated-environment security.
Public Key Infrastructure (PKI), ACME, Windows, Linux, AWS Private Certificate Authority (AWS Private CA), AWS Certificate Manager (ACM), Hardware Security Module (HSM), AWS CloudHSM, Federal PKI (FPKI), DoD PKI, CAC/PIV, mutual TLS (mTLS), Identity and Access Management (IAM), TLS, X.509, Microsoft Intune, Microsoft Endpoint Manager, Windows 10/11, Group Policy, AWS GovCloud
GDITNYSE: GD: Delivers IT and mission services to government agencies.
5+ YOEMust possess Top Secret clearance and be able to obtain Top Secret/SCI; US citizenship and DoD 8140 IAT II compliance; 5+ years related experience; knowledge of PKI, CAs, RAs, HSMs, X.509/TLS/OCSP/CRL; PowerShell/Python scripting; bachelor's degree in CS/CE/IT preferred (experience may substitute).
International Motors: Manufacturer of commercial trucks, buses, and diesel engines.
3+ YOE1+ MgmtLead PKI team; design and manage certificate lifecycle and PKI architectures; experience with Venafi/DigiCert/Microsoft AD CS, HSMs, cloud PKI (Azure/AWS/GCP); minimum 3–5+ years InfoSec experience and 1 year lead experience.
Venafi, DigiCert, Microsoft AD CS, Entrust, HSM, Azure, AWS, GCP, CI/CD
ZTI Solutions: Provides cybersecurity and networking consulting services for federal agencies.
8+ YOEU.S. citizen with active Secret clearance, 8+ years systems/security experience (4+ focused on PKI), AD CS experience, certificate lifecycle automation, scripting/automation skills, knowledge of X.509 and cryptography, and DoD/Federal compliance familiarity.
Microsoft Active Directory Certificate Services (AD CS), ACME, SCEP/EST, REST APIs, PowerShell, Python, Bash, Ansible, Terraform, Azure, AWS, Kubernetes, Entrust, DigiCert, EJBCA, Keyfactor, Venafi, HSM