Concept Solutions is seeking a
PKI & Identity Infrastructure Engineer (FAA Enterprise Services) supporting one of the nation's most complex enterprise environments. We are seeking a highly skilled Senior PKI & Identity Infrastructure Engineer to serve as a technical authority across enterprise Public Key Infrastructure (PKI), identity services, directory systems, Linux/Windows administration, and secure cryptographic operations.
This role is ideal for an advanced systems engineer who thrives in high-security, large-scale federal environments and is passionate about securing enterprise authentication, certificate lifecycle management, and infrastructure resilience. You will play a key role in supporting secure digital trust across the FAA while collaborating with cybersecurity, infrastructure, and business stakeholders.
Enterprise PKI & Cryptographic Services- Serve as a senior technical lead for enterprise PKI architecture, administration, and operational support across Certification Authorities (CAs), Registration Authorities (RAs), and Validation Authorities (VAs)
- Administer and maintain PKI platforms across Windows and Linux environments, including EJBCA operations, ACME, SCEP, certificate enrollment, CRL distribution, OCSP, CDP, and AIA services
- Execute and document PKI key ceremonies, offline root CA operations, and cryptographic material handling in compliance with Certificate Policies (CP) and Certification Practice Statements (CPS)
- Manage and maintain Hardware Security Modules (HSMs), including Thales and Luna platforms, ensuring compliance with federal cryptographic standards
- Support secure certificate lifecycle management, validation services, and enterprise trust models
Identity Infrastructure & Systems Administration- Administer Red Hat Enterprise Linux (RHEL) environments supporting PKI, identity, and application services including patching, hardening, authentication integration, and compliance
- Perform comprehensive Microsoft Windows Server administration including lifecycle management, patching, WSUS/Tanium baselines, hardening, backup validation, and remediation
- Support Docker/containerized solutions aligned with enterprise deployment and security standards
- Maintain supporting web/application infrastructure including IIS, Apache, and JBoss
Database & Operational Support- Support PostgreSQL and MariaDB environments for PKI and identity services
- Perform maintenance, backup validation, availability monitoring, and operational troubleshooting
- Ensure service reliability using SLA/SLO/SLI performance principles
Documentation, Compliance & Collaboration- Develop and maintain SOPs, architecture diagrams, lifecycle documentation, audit artifacts, and operational procedures
- Partner with cybersecurity teams, FAA stakeholders, Lines of Business, and enterprise customers to support mission requirements
- Present technical solutions clearly to both technical and non-technical stakeholders
- Support compliance, audit readiness, and continuous service improvement
Requirements
- Bachelor's degree in Information Systems, IT Management, Business Systems, MIS
- 5+ years or an additional 4+ years of relevant experience in lieu of an BS degree
- Advanced experience supporting enterprise PKI services in large-scale environments
- Strong expertise with Windows Server, Red Hat Enterprise Linux, and secure systems administration
- Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL
- Hands-on experience with HSM technologies (Thales, Luna, or equivalent)
- Knowledge of Docker/containerized infrastructure
- Experience with IIS, Apache, JBoss, PostgreSQL, and MariaDB
- Familiarity with federal cybersecurity, compliance, or FAA enterprise environments highly preferred
Compensation: $80K to $100K
Location and Schedule- Location: Washington, DC
- Schedule: Monday through Friday, 9:00 AM - 3:00 PM (local time)
- Security Requirement: FAA Personnel Suitability Clearance required.
Benefits: Concept Solutions offers a competitive benefits and salary package you would receive from a large company. We offer health, dental, vision and life insurance, as well as a comprehensive 401(k) plan with matching and immediate vesting.
