PKI Engineer - TS/SCI with Polygraph

PKI Engineer

Own your opportunity to support national defense. Your work will help keep critical operations secure and connected across the global enterprise directly, contributing to a mission that protects our nation every day. CIS is growing, and we invite both our experienced incumbents and new team members to be part of what's next. Incumbents bring invaluable mission insight, while new talent adds fresh ideas and energy. Together, we'll strengthen continuity and drive the next generation of innovation.

Meaningful work and personal impact as a PKI Engineer supporting CIS, you will design, implement, and sustain secure public key infrastructure services that support authentication, encryption, and identity trust across multiple networks and security domains. You will engineer certificate services, integrate identity systems, maintain PKI related infrastructure, and ensure the resilience and compliance of enterprise credentialing services. Your work strengthens secure access, protects sensitive data, and enables mission critical operations across a distributed enterprise.

Key responsibilities:

• Engineer, integrate, and maintain enterprise PKI services and supporting infrastructure
• Manage secure certificate lifecycle processes across users, systems, and applications
• Troubleshoot PKI issues involving certificates, trust, authentication, and revocation
• Support MFA through secure credentialing and token management
• Maintain PKI system health, including CRLs, certificate stores, and authentication components
• Collaborate across engineering, cyber, and operations to integrate PKI into new technologies
• Maintain PKI architecture documentation, configuration baselines, and SOPs
• Implement and validate patches and security updates in alignment with vulnerability management and security directives
• Investigate and resolve patch related compliance issues, supporting POA&M development and corrective action verification

What you'll need to succeed:

• Education: Bachelor's degree in an IT-related field, or 10+ years of relevant IT experience in lieu of a degree
• Certification: Meet DoD 8140 Information Assurance Workforce certification requirements (e.g., Security+ CE, etc.)
• Clearance: Active TS/SCI clearance with a favorable polygraph
• Experience engineering or administering PKI systems, certificate authorities, token services, or IAM components
• Strong understanding of certificates, trust models, revocation, key management, and authentication protocols
• Ability to diagnose and resolve complex PKI technical issues across distributed systems and networks
• Familiarity with enterprise identity services, MFA platforms, and secure credentialing workflows
• Strong communication, documentation, and cross-team collaboration skills
• US citizenship required
• Location: Onsite