Want to know if you’re a fit?
Upload your resume and let our AI show you.
Upload your resume and let our AI show you.
Skills
- Ansibleunmatched
- Application Programming Interface (API)unmatched
- Authenticationunmatched
- Automationunmatched
- Certificate Authoritiesunmatched
- Certificate Issuanceunmatched
- Cloud Computingunmatched
- Continuous Deployment/Deliveryunmatched
- Continuous Integrationunmatched
- Cryptographyunmatched
- Defense Information Systems Agency (DISA)unmatched
- Digital Certificatesunmatched
- FISMA - Federal Information Security Management Actunmatched
- Federal Information Processing Standards (FIPS)unmatched
- Identify Issuesunmatched
- Identity Data Managementunmatched
- Incident Responseunmatched
- Internet Securityunmatched
- Microsoft Certificationsunmatched
- Network Systemsunmatched
- Operations Security (OPSEC)unmatched
- Public Key Infrastructure (PKI)unmatched
- Python Programming/Scripting Languageunmatched
- Regulatory Complianceunmatched
- SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
- Scripting (Scripting Languages)unmatched
- Security Complianceunmatched
- Smartcardsunmatched
- Standard Operating Procedures (SOP)unmatched
- Systems Administration/Managementunmatched
- Systems Engineeringunmatched
- Technical Writingunmatched
- U.S. National Institute of Standards and Technology (NIST)unmatched
- Windows PowerShellunmatched
Description
Everforth ECS is seeking a Senior Public Key Infrastructure (PKI) Engineer to work in our Fairfax, VA office in a hybrid onsite/remote capacity.
The Senior PKI Engineer will be responsible for the architecting, implementation, administration, automation, and maintenance of enterprise Public Key Infrastructure (PKI) systems and cryptographic services. This role supports secure authentication, encryption, digital signing, certificate lifecycle management, and enterprise trust services across complex environments.
The engineer will lead efforts to modernize and automate certificate management processes, reduce manual administration, and improve the scalability and security of PKI operations. Responsibilities include managing certificate authorities (CAs), automating certificate issuance and renewal workflows, integrating PKI services with enterprise platforms, and supporting compliance with cybersecurity standards and operational requirements.
Key Responsibilities
- Architect, deploy, configure, and maintain enterprise PKI environments and certificate authority infrastructure.
- Automate certificate lifecycle management processes including certificate issuance, renewal, revocation, rotation, and expiration monitoring.
- Develop and maintain automation scripts, APIs, and workflows for PKI and certificate management using tools such as PowerShell, Python, Ansible, Terraform, or similar technologies.
- Implement automated certificate enrollment and management solutions for servers, applications, network devices, containers, and cloud platforms.
- Administer internal and external certificate authorities (Microsoft CA, Entrust, DigiCert, EJBCA, or similar platforms).
- Implement and maintain TLS/SSL certificates across enterprise systems and environments.
- Troubleshoot PKI-related issues involving authentication, encryption, trust relationships, and certificate validation.
- Support identity and access management integrations using certificates, smart cards, and multifactor authentication technologies.
- Ensure PKI systems comply with organizational security policies and applicable standards such as NIST, FIPS, DISA STIGs, FedRAMP, or FISMA requirements.
- Collaborate with cybersecurity, DevSecOps, cloud, network, and systems engineering teams to integrate secure certificate management into enterprise platforms and CI/CD pipelines.
- Participate in incident response activities involving cryptographic systems, certificate compromise, or trust-related issues.
- Maintain technical documentation, architecture diagrams, standard operating procedures, and configuration baselines.
- Other duties, as assigned.
Numbers & Facts
| Location | DC |
| Industry | Staffing/Employment Agencies |
| Company Size | 50 to 99 employees |
| Year Founded | 2000 |
| Website | http://www.ecs-federal.com/ |
About Company
ECS was founded in 2001 by experienced IT professionals with a commitment to quality processes, people and performance. Led by our Chairman, Roy Kapani, and an experienced executive leadership team, ECS provides our customers with solutions and services that support their critical needs and further mission objectives. This commitment has paved the way for expansive growth, year over year.
ECS gained market share in 2011 in the Department of Defense and Federal spaces through both organic and acquisition growth. In May, ECS completed its first strategic acquisition with the purchase of OAK Management, Inc., a leading provider of marine environmental services, ship systems engineering, maritime consulting and platform acquisition management. The OAK acquisition kicked off ECS’ intention to add tactical acquisitions as a part of its long term strategy to supplement and expand upon organic growth and to build enterprise value. ECS closed out 2011 with the acquisition of Paradigm Technologies, Inc. The Paradigm transaction added approximately 200 employees to ECS’ existing 900+ employees. Paradigm also added new Defense clients for ECS, including the Missile Defense Agency, the Navy’s Program Executive Officer for Integrated Warfare Systems, the United States Marine Corps, and the U.S. Marshals Service.
In 2012, ECS completed the acquisition of iLuMinA Solutions, Inc. iLuMinA brings large-scale Enterprise Resource Planning (ERP) software implementation and infrastructure design and development to ECS’ expanding capabilities.
ECS will continue to invest in corporate infrastructure and quality processes as we grow and enhance our ability to offer professional excellence to both our customers and our employees.