PKI & Identity Infrastructure Engineer (FAA Enterprise Services)
$80,000–$100,000 year
On-siteWashington, United States
Job Summary
Administer enterprise PKI platforms across Windows and Linux environments, managing Certification Authorities, Registration Authorities, and Validation Authorities while executing key ceremonies and handling cryptographic material in compliance with federal standards. Maintain Hardware Security Modules including Thales and Luna platforms, and oversee certificate lifecycle management, validation services, and trust models. Perform comprehensive Red Hat Enterprise Linux and Microsoft Windows Server administration, including patching, hardening, backup validation, and remediation for supporting web infrastructure such as IIS, Apache, and JBoss. Support PostgreSQL and MariaDB environments, ensuring service reliability through SLA/SLO/SLI principles and operational troubleshooting. Develop SOPs, architecture diagrams, and audit artifacts while partnering with cybersecurity teams and FAA stakeholders to support mission requirements. Present technical solutions to both technical and non-technical audiences.
Required Qualifications
- Bachelor's degree in Information Systems, IT Management, Business Systems, MIS
- 5+ years or an additional 4+ years of relevant experience in lieu of an BS degree
- Advanced experience supporting enterprise PKI services in large-scale environments
- Strong expertise with Windows Server, Red Hat Enterprise Linux, and secure systems administration
- Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL
- Hands-on experience with HSM technologies (Thales, Luna, or equivalent)
- Knowledge of Docker/containerized infrastructure
- Experience with IIS, Apache, JBoss, PostgreSQL, and MariaDB
- FAA Personnel Suitability Clearance required
Desired Qualifications
- Familiarity with federal cybersecurity, compliance, or FAA enterprise environments highly preferred
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.