Senior PKI Engineer / SME

Vervic
  • Washington, District of Columbia
  • $1–$1.01 Per Hour
  • Autofill and Review
25 days ago

Job Description

Benefits:
  • 401(k) matching
  • Dental insurance
  • Health insurance
  • Paid time off
Senior PKI Engineer / SMELocation: On-site Washington, DCJob Duties:
  • Work centers on designing and maintaining trust models that other systems depend on,often with little margin for error.
  • Problems are rarely straightforward—solutions must account for vendor constraints,security requirements, and interoperability edge cases.
  • Ownership of PKI architecture and implementation from policy design throughoperational support.
  • High OPTEMPO; requires precision, persistence, and disciplined follow-through.What You’ll Do
  • Design and manage PKI architectures, including root/intermediate hierarchies, chains oftrust, and certificate lifecycle processes.
  • Create and maintain segmented trust models (organizational partitions, cross-domaintrust, constrained intermediates).
  • Generate and support certificates for diverse use cases, including handling vendor-specific constraints and non-standard requirements (e.g., wildcard usage, SANconfigurations, custom extensions).
  • Troubleshoot certificate validation issues across systems, applications, and networkboundaries.
  • Collaborate with systems, network, and application teams to ensure certificates functioncorrectly within their environments.
  • Define and enforce certificate policies, revocation strategies (CRL/OCSP), and securitycontrols.
  • Mentor engineers on PKI fundamentals and correct implementation practices.Tech Knowledge / Skills
  • PKI fundamentals: X.509, certificate chains, trust stores, key management
  • Microsoft CA, OpenSSL, and other PKI tooling
  • TLS/SSL, mutual authentication, certificate-based access control
  • CRL, OCSP, revocation and lifecycle management
  • Hardware security module
  • Integration points: web servers, load balancers, applications, network devicesRequirements
  • 8+ years experience in PKI, security engineering, or related systems roles insecure/cleared environments
  • Active TS; must be able to obtain TS/SCI
  • Professional certification required; expert-level capability preferred
  • Demonstrated ability to design and troubleshoot PKI systems across multiple platformsand vendors
  • Experience with complex trust models and real-world certificate interoperabilitychallenges
  • DoD 8140 compliance requiredEOE
Compensation: $1.00 - $1.01 per year

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Numbers & Facts

LocationWashington, District of Columbia
Salary$1–$1.01 Per Hour

Skills

  • Access Controlunmatched
  • Authenticationunmatched
  • Dental Insuranceunmatched
  • DoD Directive 8140unmatched
  • DoD Directive 8570unmatched
  • Follow Throughunmatched
  • Health Insuranceunmatched
  • Human Capitalunmatched
  • Human Resourcesunmatched
  • Identify Issuesunmatched
  • Interoperability Requirementsunmatched
  • Machine Toolunmatched
  • Mentoringunmatched
  • Microsoft Product Familyunmatched
  • OpenSSLunmatched
  • Policy Implementationunmatched
  • Public Key Infrastructure (PKI)unmatched
  • SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
  • Sensitive Compartmented Information (SCI)unmatched
  • Talent Managementunmatched
  • Top Secret Clearanceunmatched
  • Use Casesunmatched
  • X.509 Digital Certificateunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder