PKI Engineer
Capitaltg · Remote (US)
About this role
**Capital Technology Group (CTG)** is seeking a **PKI Engineer** to implement and maintain enterprise **Public Key Infrastructure (PKI)** services supporting mission-critical federal systems. --- ## Client Requirements - Applicants **MUST BE** **U.S. Citizens** - Must be able to obtain **Public Trust** clearance --- ## The CTG Experience CTG partners with federal agencies to build **secure, scalable, mission-driven solutions** using agile methodologies. CTG is recognized as a **Top Workplace (Washington Post) in 2025 and 2026**. --- ## About the Role You will implement and maintain PKI architecture and support certificate lifecycle needs across complex, highly secure environments—particularly where **PKI platforms** and **Hardware Security Modules (HSMs)** are involved. --- ## You Will Get To - Implement and maintain **PKI architecture** per technical requirements and PKI SME guidance - Build and maintain **CI/CD pipelines** using **Jenkins** and/or **Harness** - Automate provisioning and configuration of **Windows and Linux** infrastructure supporting PKI - Manage containerized workloads using **Docker, Helm, Kubernetes, and EKS** - Administer **AWS** infrastructure including **EC2** and **RDS** - Provide user support for **certificate lifecycle** --- ## Who You Are - Collaborative engineer who enjoys solving complex technical and security challenges - Passionate about building scalable, secure, reliable cloud-based solutions - Comfortable working across application development, cloud infrastructure, identity, and security domains - Able to balance technical innovation with operational excellence and compliance requirements - Effective communicator working with cross-functional teams and stakeholders --- ## Qualifications - **Bachelor’s degree** in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or related field (or equivalent experience) - **4+ years** experience in PKI engineering, cybersecurity engineering, IAM, infrastructure/security engineering, or enterprise platform engineering - Experience with PKI platforms: **Entrust, DigiCert, Venafi, Let’s Encrypt** - Experience with **Hardware Security Modules (HSMs)** - Experience with cloud platforms such as **AWS and/or Azure** --- ## Nice to Have - Experience with **Microsoft Certificate Services** - Experience with PKI/certificate management products - Familiarity with **PIV authentication** and identity governance solutions - Experience supporting **highly regulated environments** (federal/public sector) - Relevant cloud, security, or architecture certifications --- ## Salary - Estimated range: **$100,000–$130,000 annually** (final offer may vary based on experience, skills, and other factors) --- ## Benefits (Full Time Employee) - **Remote Work** *(Hybrid roles will be specified in the job post)* - Competitive compensation package - Medical, Dental, and Vision - Life Insurance, Short/Long Term Disability - Employee Assistance Program - **401(k) with 4% matching** - Liberal PTO vacation policy - Generous Annual Continuing Education - Annual Wellness Budget - Bonus Incentive Programs *(employee referrals and performance-based rewards)* --- *Capital Technology Group is an equal opportunity employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.*
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.