PKI/PKE Engineer
Capgemini Government Solutions LLC
PKI/PKE Engineer
Capgemini Government Solutions (CGS) LLC is seeking a PKI/PKE Engineer to support mission-critical government clients. The ideal candidate will collaborate with a high-performing team, engage with a broad range of stakeholders, and play a key role in expanding CGS capabilities while continuing to grow their technical and consulting expertise. PKI/PKE Engineer will be tasked to design, implement, and operate systems that enable secure digital identity and data confidentiality. This role serves as the technical lead for Certificate Authorities (CAs), Hardware Security Modules (HSMs), and the integration of encryption services across enterprise workflows.
Responsibilities:
- Architect and maintain multi-tier Certificate Authority hierarchies (Root, Subordinate, and Issuing CAs) using Microsoft ADCS, Entrust, or DigiCert.
- Enable applications (Web, Mobile, IoT) to use certificates for S/MIME email encryption, TLS/SSL, and 802.1X network authentication.
- Implement and manage Certificate Lifecycle Management (CLM) tools like Venafi, Keyfactor, or AppViewX to automate renewals and prevent outages.
- Manage the physical and logical lifecycle of Hardware Security Modules (HSMs) such as Thales/nCipher or Utimaco.
- Draft and enforce the Certificate Policy (CP) and Certification Practice Statement (CPS) to ensure legal and regulatory compliance (e.g., FIPS 140-2/3).
- Lead the transition to Post-Quantum Cryptography (PQC) algorithms to protect against "harvest now, decrypt later" threats.
- Act as the SME for certificate-related outages, compromised keys, or emergency revocation (CRL/OCSP) procedures.
Requirements:
- Minimum of 3+ years of progressive experience in PKI/PKE administration.
- Bachelor's degree in computer science, or a related field.
- Deep understanding of asymmetric/symmetric encryption, hashing algorithms (SHA-256/384), and protocols (OCSP, SCEP, EST, CMP).
- Proficiency in PowerShell, Python, or OpenSSL for automating certificate requests and inventorying.
- Familiarity with X.509, NIST SP 800-53/175, and RFC 5280.
- Ability to obtain Secret level government security clearance / Active clearance preferred.
- Ability to obtain CompTIA Security+ / Active certification preferred.
Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the PKI/PKE Engineer in United States vacancy
- A leading technology solutions provider is seeking a PKI/PKE Engineer in San Antonio, Texas. The role involves designing and implementing systems for secure digital identity and data confidentiality, managing Certificate Authorities (CAs) and Hardware Security Modules...Suggested
$100k - $120k
...Capgemini Government Solutions (CGS) LLC is seeking a PKI/PKE Engineer to support mission‑critical government clients. The ideal candidate will collaborate with a high‑performing team, engage with a broad range of stakeholders, and play a key role in expanding CGS capabilities...SuggestedFull timeLocal areaCapgemini Government Solutions LLC
San Antonio, TX3 days ago- Delta Air Lines is seeking a PKI Engineer to design, operate, and enhance our enterprise Public Key Infrastructure (PKI). In this role, you will ensure secure authentication, encryption, and certificate lifecycle management across systems while collaborating with application...Suggested
$89.34k - $175.21k
A leading technology firm in Phoenix, Arizona, is seeking an Identity Security - PKI Engineer. This role involves designing and managing enterprise-grade PKI solutions and requires US Citizenship along with the ability to maintain security clearance. Candidates should...SuggestedFlexible hours- Zachary Piper Solutions is seeking a Senior Systems Engineer SME to support a high-profile federal program in Newington, VA. This position... ...include leading systems engineering initiatives, supporting PKI environments, and collaborating with cross-functional teams. Candidates...Suggested
- Corvus Consulting, LLC is looking for a PKI Engineer to support the evaluation and maintenance of Public Key Infrastructure (PKI) solutions in a secure environment. This position is primarily remote but requires candidates to be local to Aberdeen Proving Grounds, MD for...Local areaRemote work
- EY seeks a senior PKI Engineer to design, develop, and deploy PKI services across global environments. You will work with Active Directory Certificate Services, NDES, OCSP, HSMs, Venafi, and Intune Connectors to deliver secure certificate management and automation. The...
$55 - $65 per hour
1 day ago Be among the first 25 applicants Senior PKI Engineer / AD CS Architect (On-Prem Utility Environment) Location- Tampa, Fl (Midtown) Duration: 1 year Electric Utility will require to obtain NERC Clearance once joins Pay $55-$65/hr Alternate Titles (if needed...Contract work- LufCo is looking for a Systems Engineer to join their team in Annapolis Junction, MD. This role requires expertise in Systems Engineering... ...with strong communication skills. Responsibilities include driving PKI architecture, documenting stakeholder priorities, and ensuring...
- Guidehouse is seeking a HSPD-12 Engineer to act as a subject-matter expert for credential management systems, focusing on HSPD-12 technologies like Intercede MyID and PKI. The role involves engineering, troubleshooting, and cloud-support services across cross-functional...
- Koitecc Solutions is looking for a Senior Security Operations Engineer based in Seattle, WA. This role mission includes ensuring your organization... ...-on initiatives in the Identity space, particularly focused on PKI solutions. The ideal candidate will have over 7 years of...
- The Depository Trust & Clearing Corporation (DTCC) in Tampa, FL is seeking a Lead PKI Engineer to drive PKI design, implementation, and maintenance, leveraging ADCS, Venafi, and HSMs to strengthen security and efficiency. You will automate certificate management with Ansible...
- ENS Solutions, LLC is seeking an experienced PKI Engineer/IAM Engineer located in Maryland. The role involves designing, implementing, and maintaining PKI environments with a focus on automation through Ansible and Bash scripting. Candidates should have over 5 years of...
- A cybersecurity firm is seeking an experienced Public Key Infrastructure (PKI) Engineer to design, implement, and manage secure certificate services. The role involves automating PKI processes across enterprise environments, collaborating with security teams, and ensuring...
$85k - $145k
A leading technology solutions provider is seeking an experienced Public Key Infrastructure (PKI) Engineer to design, implement, and manage secure certificate and encryption services. The role will focus on automating PKI processes, ensuring authentication across various...- EY is seeking a Senior PKI Engineer in the Chicago area to design, develop, and deploy secure PKI services that support a broad set of certificate use cases across a global organization. You will work with technologies such as ADCS, NDES, OCSP, Thales HSMs, Venafi, and...
- Guidehouse Digital, LLC seeks an IT security engineer to support PIV/PKI credentialing environments, aligning with FICAM, NIST, and FISMA requirements. You will manage PKI infrastructure, HSMs, CAs, RAs, and cloud-hosted services across AWS and Azure, with Terraform/Ansible...
- A leading technology staffing firm is seeking a Certificate Management Services Engineer for their Enterprise PKI and Crypto Technologies team. The role is critical for automating digital certificate lifecycle processes using the Venafi Trust Protection Platform. Ideal...
$139k - $159k
...The PKI Engineer, Senior designs, implements, and operates enterprise Public Key Infrastructure services that underpin secure authentication, encryption, and digital signatures across mission-critical systems. The role serves as the primary technical authority for certificate...Contract workWork at officeASM Research, An Accenture Federal Services Company
Denver, CO6 days ago- ...Senior ICA/PKI Engineer Teammates in this role deliver moderately complex tools and systems that mitigate the risk of malicious cyber attacks. Individuals in this role contribute to the protection of system boundaries, keeping computer systems and network devices hardened...
RIT Solutions
Denver, CO1 day ago - 2HB Incorporated is seeking a Systems Engineer to support a government customer in Annapolis Junction, MD. This full-time role requires a... ...The candidate will work on storage management, virtualization, PKI/TLS cryptography, and network/firewall tasks, with a bonus for automation...Full time
- Booz Allen Hamilton is seeking a Public Key Infrastructure Engineer to support large IAM projects, assess identity lifecycles, and design... ...privileges and secure credential management. Applicants should have PKI experience, AD CS, and a TS/SCI clearance. This role involves...Remote job
- EY is seeking a senior PKI engineer to drive solution development and implementation across a global, secure PKI environment. You will design, develop, and deploy PKI services with Microsoft PKI technologies, Thales HSMs, Venafi tooling, and automated provisioning interfaces...
$130k - $270k
Systems Engineer 3 - Linux/PKI/Crypto/SSP/STE/STN/AWS Annapolis Junction, MD Build to something to be proud of. Captivation has built a reputation on providing customers exactly what is needed in a timely manner. Our team of engineers take pride in what they develop and...Hourly payTemporary work$128.1k - $239.6k
...wherever you want it to go. Join EY and help to build a better working world. The senior engineer role drives solution development, and implementation activities to provide PKI related services to the business across a large set of digital certificate use cases. The...Summer holidayLocal areaFlexible hoursEY
Phoenix, AZ2 days ago- ...The PKI Engineer, Mid designs, implements, and maintains enterprise public key infrastructure services that underpin secure authentication, encryption, and digital signatures for mission-critical systems. The role owns certificate lifecycle management processes, ensuring...Contract workWork at office
ASM Research, An Accenture Federal Services Company
Carson City, NV6 days ago - EY in the United States is seeking a Senior PKI Engineer to design, develop, and deploy PKI services across a global, security‑driven environment. You’ll work with AD CS, NDES, OCSP, HSMs, Venafi, and Intune certificate connectors to deliver secure certificate management...
- EY is seeking a Senior PKI Engineer in Secaucus, NJ to design, develop, and deploy PKI services across a global enterprise. You will work with Microsoft AD CS, NDES, OCSP, HSMs, Venafi, and Intune certificate connectors to deliver secure certificate management and automation...Flexible hours
- EY seeks a Senior PKI Engineer to drive design, development, and deployment of PKI services across a global environment. You will work with AD CS, NDES, OCSP, and Venafi, delivering secure certificate management solutions and integrating with automated provisioning services...
- EY in San Francisco seeks a senior PKI Engineer to design, develop, and deploy PKI services across global operations, working with AD CS, NDES, OCSP, Thales Luna HSMs and Venafi. You’ll partner with stakeholders, document configurations and test plans, and drive automated...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to PKI/PKE Engineer. Be the first to apply!
