PKI & Hardware Security Module (HSM) Engineer

$130k - $180k

Full-time

Nationwide IT Services

PKI & Hardware Security Module (HSM) Engineer
Clearance: Active Secret required
Place of Performance: Fairfax, VA (On-site) | Full-Time, Permanent
Position Overview
Nationwide IT Services (NIS) is seeking an experienced Public Key Infrastructure (PKI)& Hardware Security Module (HSM) Engineer to support the NATO Post-Quantum Cryptography (PQC) Pilot Project. This hands-on engineer will modernize enterprise public key infrastructure, implement hybrid classical and post-quantum certificates, integrate HSMs for secure key management, and support a disciplined cryptographic migration. The role also helps develop repeatable capabilities in PKI modernization, crypto-agility, and PQC implementation.
Key Responsibilities
Design, deploy, and operate enterprise PKI using Microsoft AD CS, EJBCA, or equivalent systems, including CA hierarchies, certificate lifecycles, CRL/OCSP, and CP/CPS policies.
Integrate and administer HSMs such as Thales Luna or Entrust nShield, including partitioning, in-HSM key generation, backup/cloning, PED authentication, and firmware management.
Implement hybrid X.509 certificates combining classical and post-quantum cryptography (ML-DSA / ML-KEM); evaluate hybrid versus composite approaches.
Plan and execute key ceremonies under dual-control and split-knowledge procedures; maintain scripts, witness records, and audit evidence.
Support FIPS 140-3 module use and prepare RMF/ATO security evidence.
Create phased CA and certificate cutover plans, rollback criteria, and go/no-go evidence.
Troubleshoot TLS/mTLS, code signing, S/MIME, and application authentication integrations.
Document architecture, SOPs, and configuration baselines for customer and NATO stakeholder review.
Required Qualifications
Bachelor’s degree in computer science, Information Systems, Cybersecurity, Electrical Engineering, or related field; equivalent demonstrated experience accepted.
5+ years of engineering or operating enterprise PKI in production, including CA deployment, hierarchy management, and lifecycle automation.
Hands-on HSM administration, including key lifecycle, partitioning, multi-person authentication, and backup/restore.
Experience executing key ceremonies with dual control and audit/witness requirements.
Working knowledge of ML-KEM, ML-DSA, SLH-DSA, NIST FIPS 203/204/205, and CNSA 2.0 migration timelines.
Experience with X.509, TLS/mTLS, CRL/OCSP, enterprise certificate integration, and Python and/or PowerShell.
Active U.S. Secret security clearance; U.S. person status required.
Required Certifications
CompTIA Security+ at minimum (CISSP or CISM strongly preferred).
At least one vendor HSM certification (such as Thales Luna or Entrust nShield) OR documented equivalent hands-on HSM administration experience.
Preferred Qualifications
Previous PQC pilot or hybrid-certificate implementation experience.
NATO, federal, classified, or highly regulated environment experience.
RMF/ATO documentation and FIPS 140-3 or Common Criteria exposure.
PKI-specific AD CS or EJBCA training; CCSP, GSEC, or GCIH certification.
Advanced education or training in cryptography or applied mathematics.
Top Secret/SCI clearance or NATO Secret eligibility.
Additional Requirements
Work on-site in Fairfax, Virginia; occasional travel as required by the pilot.
About Nationwide IT Services
NIS is a CVE-verified Service-Disabled Veteran-Owned Small Business and an IT and management consulting company. Our mission is to deliver value-added services to our customers, leveraging technology, people, and industry best practices to implement innovative solutions through our trusted employees and team members.  
Our benefits package includes medical, dental, and vision insurance; life and disability insurance; a 401(k) plan with employer match; paid holidays; PTO (sick/vacation); commuter benefits; an employee assistance program (EAP); educational reimbursement; and pet insurance.
Salary range $130,000 to $180,000 annually
The salary range is a general guideline. We consider several factors when determining base salary offers, including the position's scope and responsibilities, the candidate's experience, education, and skills, and current market conditions.

Apply

Vacancy posted 2 days ago

Similar jobs that could be interesting for youBased on the PKI & Hardware Security Module (HSM) Engineer in Fairfax, VA vacancy

PKI Systems Engineer
...Public Key Infrastructure (PKI) system engineer. As a Senior PKI Engineer,... ...participate and lead in managing, securing, engineering, and governing... ...maintain enclaved server hardware, storage, switches, server... ..., and Hardware Security Modules (HSMs).Providing in-depth subject...
Suggested
Contract work
Work at office
Remote work
Science Applications International Corporation
Springfield, VA
4 days ago
Sales Engineer
...of technology solutions for securing digital assets, identities,... ...renowned Primus range of Hardware Security Modules (HSMs), are developed and produced... ...We are seeking a Sales Engineer – HSM (Pre-Sales Consultant) to... ..., cloud computing and PKI environments is a plus Fluency...
Suggested
Full time
Remote work
Visa sponsorship
Securosys
Arlington, VA
1 day ago
Security Hardware Engineer, Infrastructure Security - Security Products and Solutions
$117.3k - $160k
...infrastructure, and we're looking for talented people who want to help. You'll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You'll collaborate with people across AWS to...
Suggested
Immediate start
Worldwide
Flexible hours
Amazon
Herndon, VA
5 days ago
Engineer V
...exciting opportunity for an RF Engineer to join our CSS group located... ...innovative, cutting-edge, security solutions for the United States... ...troubleshooting of avionics hardware spanning PCBA board testing and... ...multi-carrier techniques and modulation types such as QPSK, APSK and...
Suggested
Part time
Remote work
Worldwide
Relocation package
General Atomics
Herndon, VA
4 days ago
Senior Embedded Hardware Security Engineer
...is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced... ...and creative engineers with a focus on hardware reverse engineering of embedded systems...
Suggested
Internship
Local area
Mitre
McLean, VA
4 days ago
Hardware Reverse Engineer TS
$112.2k - $196.4k
...Parsons is looking for talented Cleared Hardware and Embedded Systems Reverse Engineers to join our team! In this role you... ...software components, units, and modules to meet product specifications and... ...and developing novel security applications for embedded systemsQuickly...
Full time
Flexible hours
Parsons
Centreville, VA
4 days ago
Engineer or Physicist in Positioning, Navigation, and Timing
...skills strengthen national security, cybersecurity, health, transportation... ...services. We’re a nonprofit engineering, applied research, and... ...and evaluating leading edge hardware in PNT, both in the lab and... ...theorywaveform design, modulation theory, error control coding...
Internship
Local area
3 days per week
Mitre
McLean, VA
1 day ago
Device Engineer II
$88.3k - $122.5k
...passionate embedded software engineer for the Device Engineering team... ...devices including security panels, networking gateways,... ...devices, build and manufacture hardware, architect and implement software... ...real hardware, owning tasks and modules from design review through code...
Casual work
Work at office
Immediate start
Worldwide
Alarm.com
Tysons Corner, VA
15 days ago
PKI Engineer - Active TS/SCI With CI Poly
...Description We are seeking an experienced PKI Engineer/IAM Engineer to support enterprise... ..., implement, automate, and maintain secure identity and cryptographic... ...Qualifications Experience working with Hardware Security Modules (HSMs) Familiarity with ACME protocol...
Temporary work
Relocation package
ENS Solutions, LLC
McLean, VA
20 days ago
Satellite Communication (SATCOM) Engineer - TS/SCI w/Poly
...component of our nation’s safety and security. Make an impact by using your... ...(SATCOM)/Network Engineer at GDIT. As the Satellite... ...conceptualization to delivery of hardware solutions Prepare detailed... ...budgets, noise analysis, modulation/demodulation signal analysis,...
Temporary work
General Dynamics Information Technology
McLean, VA
a month ago
Spectrum Compatibility Engineer, Senior
...where your skills strengthen national security, cybersecurity, health, transportation,... ...and citizen services. We’re a nonprofit engineering, applied research, and advanced technology... ...and estimation theorywaveform design, modulation theory, error control coding,...
Work experience placement
Internship
Local area
3 days per week
Mitre
McLean, VA
2 days ago
Senior Cybersecurity Engineer
$113.2k - $237.8k
...cybersecurity posture in support of national security. Joining the TCS Team means working with... ...technologies, on high performing cyber engineering teams, and benefiting from accelerated... ...specific, detailed information for hardware and software selection, implementation techniques...
Long term contract
Contract work
Work experience placement
Local area
Flexible hours
CACI International
Springfield, VA
3 days ago
Wireless Engineer w Travel - SECRET Clearance
$250k
DescriptionActioNet is seeking a Wireless Engineer with Travel Overview: The Wireless... ...compliance with Air Force and DoW technical, security, and spectrum standards. The Wireless... ...involving RF interference, connectivity, hardware failures, authentication, or configuration...
Remote work
ActioNet
Vienna, VA
5 days ago
Identity Cybersecurity Engineer
...is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology... ...) and manage credentials/trust services (PKI, certificates).Lead Identity Governance &...
Internship
Local area
Mitre
McLean, VA
3 days ago
Senior FPGA Engineer
$91.05k - $159.37k
...technology includes transmission security (TRANSEC), Communication... ..., creative, and dedicated engineering team-members. This position... ...) in regards to abstracting hardware ~ Experience with HW PCB tools... ...in RTL Experience with modulators/demodulators, forward error...
Remote work
iDirect Government
Herndon, VA
21 hours ago
Communication Systems Analyst
...skills strengthen national security, cybersecurity, health, transportation... ...services. We’re a nonprofit engineering, applied research, and... ...complex communications hardware/software/system integration... ...characterize complex RF signals, modulation schemes, signal structures,...
Work experience placement
Internship
Local area
Mitre
Springfield, VA
2 days ago
Senior System Engineer
...experienced Senior Systems Engineer to support the... ...infrastructure, ensuring secure, scalable, and highly... ...Directory, DNS, DHCP, PKI, and virtualization platforms... ...integration with PKI, HSM, smart card, token-... ...management Hardware Security Modules (HSM) Azure Landing...
Full time
Contract work
Creative Information Technology, Inc.
Falls Church, VA
2 days ago
Electrical Engineer - Hardware
**This in an onsite, full-time position located in our Reston, VA. facility** The Hardware Electrical Engineer designs and brings up the electronics behind Kopin's microdisplay products: display driver boards, interface boards, and the hardware that connects our displays...
Permanent employment
Full time
Contract work
For contractors
Flexible hours
Kopin Corporation
Reston, VA
5 days ago
NLCC Communications Engineer
...is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced... ...communications.Experience troubleshooting complex hardware/software/system integration issues in...
Work experience placement
Internship
Local area
Mitre
McLean, VA
3 days ago
Systems Engineer (SME)
$154.05k - $278.48k
...and exciting opportunity for a Systems Engineer - SME in our Intel Sector's (IS) Solutions... ...talented team is at the forefront in Security Engineering, Computer Network Operations... ...maintenance of systems, including associated hardware and cloud resources. Updating systems...
Full time
Immediate start
Flexible hours
Leidos
McLean, VA
5 hours ago
System Engineer (Hardware focus)
$94.4k - $198.2k
Job Title: System Engineer (Hardware focus)Job Category: EngineeringTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: RegularPercentage of Travel Required: Up to 25%Type of Travel: Continental US* * *The Opportunity:CACI is seeking a cleared...
Contract work
For contractors
Work experience placement
Flexible hours
CACI International
Fort Belvoir, VA
1 day ago
EO/IR Systems Engineer
$140k - $190k
...dedicated experts in defense, aerospace, security, and related fields all work together to... ...is seeking an experienced EO/IR Systems Engineer to serve as the Test Manager for the U.S... ...test and evaluation across laboratory, hardware-in-the-loop (HWIL), and flight test environments...
Contract work
For contractors
Work experience placement
Work at office
QinetiQ
Fort Belvoir, VA
2 days ago
High Speed Guard Engineer
$90.3k - $189.6k
...US* * *The Opportunity:Transport Cyber Security Services (TCS) is a premier, long-term contract... ...TCS team provides innovative design, engineering, procurement, implementation, operations... ....Install firmware updates on physical hardware components (i.e. DellEMC, SANs, switches...
Long term contract
Contract work
Work experience placement
Worldwide
Flexible hours
CACI International
Springfield, VA
4 days ago
Integration Engineer
...technical solutions to complex national security issues. With over 50 years of business expertise... ...and Intelligence Division provides engineering services and analytic support to the Air... ..., dependencies, and requirements of hardware and software components. Support planning...
Full time
Work at office
Local area
Flexible hours
Systems Planning and Analysis
Springfield, VA
4 days ago
RF Spectrum Engineer, Lead
...where your skills strengthen national security, cybersecurity, health, transportation,... ...and citizen services. We’re a nonprofit engineering, applied research, and advanced technology... ...and antenna designwaveform design, modulation theory, error control coding, information...
Work experience placement
Local area
3 days per week
Mitre
McLean, VA
4 days ago
Wireless Communications Systems Engineer
...is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced... ...problems that require unified software, hardware, mechanical and reliability approaches while...
Internship
Local area
Mitre
McLean, VA
5 days ago
Systems Engineer
$140k - $190k
...Job Title: Senior Systems Engineer - Test & Evaluation Lead Our client is a leading developer... ...for DoD, NASA, and other national security customers. We are looking for an... ...sensors, EO/IR payloads, or other complex hardware-intensive defense systems Strong analytical...
For contractors
Work at office
Immediate start
Flexible hours
TalentRemedy
Fort Belvoir, VA
2 days ago
Sr. Embedded Hardware Engineer (6813)
$140k - $150k
...As Sr. Embedded Hardware Engineer (6813) youll build the camera systems and on-device software that feed our video intelligence products... ...including flashing kernel and device tree configuration camera module enablement and driver troubleshooting Build and maintain on...
Full time
Work experience placement
Work at office
Local area
Flexible hours
Shift work
3 days per week
MetroStar
Reston, VA
11 days ago
Senior Underwater Sensors Engineer
...is where your skills strengthen national security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced... ...modeling and algorithm development, hands-on hardware prototyping and evaluation in the BlueTech...
Internship
Local area
Immediate start
3 days per week
Mitre
McLean, VA
1 day ago
SR. SYSTEMS ENGINEER
...Senior Systems Engineer – Falls Church, VA - Hybrid... ...infrastructure, ensuring secure, scalable, and highly... ...Directory, DNS, DHCP, PKI, and virtualization platforms... ...integration with PKI, HSM, smart card, token-... ...lifecycle management, Hardware Security Modules (HSM), Azure Landing...
Contract work
Creative Information Technology
Falls Church, VA
2 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to PKI & Hardware Security Module (HSM) Engineer. Be the first to apply!