PKI EngineerLOCATION: Fort Meade, MD/REMOTESTART DATE: ImmediateCLEARANCE: SecretJOB DESCRIPTION:Soliel is seeking to hire a PKI Engineer. This position will design, secure, and automate our enterprise-wide Public Key Infrastructure. In this role, you will lead the implementation of automated certificate lifecycles leveraging the ACME protocol to eliminate manual renewals and reduce operational risk. You will also manage robust Certificate Authority (CA) hierarchies, integrate services with cloud environments, and maintain strict cryptographic security compliance. This position requires deep technical expertise in asymmetric cryptography, X.509 standards, and automated configuration management.
KEY RESPONSIBILITIES: - Design, implement, and maintain automated certificate issuance, renewal, and revocation workflows using the ACME protocol and RESTful APIs.
- Administer enterprise CA hierarchies (Root, Issuing, and Subordinate CAs) across platforms like Red Hat CS or EJBCA
- Ensure compliance with security standards such as DoW STIG, FIPS alongside Hardware Security Module (HSM) integration.
- Develop and maintain scripts and tools using Bash and Perl or Python to support operational efficiency.
- Collaborate with security, architecture, and development teams to ensure secure system and application designs.
- Document system configurations, operational procedures, and troubleshooting guides.
- Participate in system upgrades, migrations, and continuous improvement initiatives.
REQUIRED SKILLS: - Bachelor's degree in Computer Science, Engineering, or equivalent experience.
- Secret Clearance
- Five (5) years of more of knowledge and experience leveraging X.509 certificates, SSL/TLS, asymmetric cryptography, and HSM/KMS integration.
- Strong Red Hat Linux systems administration experience
- Hands-on experience configuring ACME clients/servers, SCEP, EST, and REST APIs.
- Strong scripting experience using Bash and Perl or Python
- Excellent written and verbal skills for documentation and collaboration.
Preferred Skills:- Strong experience with configuration management and automation tools, Ansible and Red Hat Satellite
- Demonstrated ability to troubleshoot complex system and application issues across multiple layers of the stack.
- LDAP experience, specifically non-Active Directory LDAP implementations
- Experience with PostgreSQL, MariaDB database platforms
- Cryptographic engineering experience, including:
- Secure key management
- Cryptographic protocol implementation or integration
COMPENSATION:• $165,000 plus (flexible based on experience)
• Major medical, dental and vision
• Paid holidays
• Paid Time Off (PTO)
• 401k and company matching
