Lead PKI Engineer - Remote Work
Job title: Lead PKI Engineer - Remote Work in Ashburn, VA at Stellent IT
Company: Stellent IT
Job description: Lead PKI EngineerRemote WorkPhone and VideoLong TermJob Description:We have a permanent position for a Lead PKI Engineer. Due to the nature of the work, you must be a US citizen to apply. This role is remote (East is preferred but anywhere in the US is fine.) This role requires travel inside the US about once per quarter for meetings or conferences. Details below. If interested, SEND RESUME. Job Overview This position is for the Lead PKI Engineer who will design, document, and implement PKI architectures while serving as a thought leader in PKI development. Maintains, documents, and supports Public Key Infrastructure (PKI), Key Management Systems (KMS) and Hardware Security Modules (HSM). Will participate and follow key standards organizations to provide guidance to the CTO for PKI roadmap generation. Serves as the SME for PKI in partner, vendor, and customer interactions. Essential FunctionsLead and execute strategic initiatives around PKI development, deployment, and maintenance to drive class-leading product and industry leading technologyDesign and deploy infrastructure necessary to support PKI for Critical Infrastructure clientsPerform maintenance and support of Public Key Infrastructure (PKI) operationsAdminister Certification Authority (CA) certificate lifecycles for various applications and solutionsInterface with clients to document Certificate Policy, and Certification Practice Statements based on client requirementsUnderstand a Certificate Practice Statement (CPS), including areas of design, deployment, validation, operational and Disaster Recovery/Business Continuity Planning (DR/BCP)Design, test, and document Key Ceremony Scripts for PKI Key material creationAssist in proactive monitoring, alerting, trend analysis for PKI and underlying infrastructure, and support the operations team in implementationAssist in the development of analytics systems for monitoring and controlling PKI functionality in an enterprise networkEvaluate upgrades and new products & technologies for the enterprise PKI infrastructure including Post-Quantum Cryptography, supply chain traceability, device-level identities, SBOM and HBOMIdentify process improvements to reduce risk and improve operational efficiency including the use of AI in PKI operationsStrong verbal and written communication skillsStrong organizational skills and time management QualificationsBasic Qualifications5-10 years of work experience in PKI Operations/Engineering, Information Security, Cybersecurity and/or related IT operational functions, with a bachelor's degree or an advanced degreeDeep understanding of PKI policies and procedures (RFC5280, RFC3647, ITU-T X.509, ISO21188, etc.)Deep understanding of PKI components; Certification Authority, Registration Authority, CRL, OCSP, and x509 Certificates Preferred QualificationsDetailed familiarity with Internet protocols including, but not limited to TCP/IP, TLS, DNS, IPsec, OCSP, SCEP, and LDAP.DoD 8570.01 IAT II (One of the following or higher (CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) and other comparative information security certifications are preferredPankaj KumarLead IT RecruiterEmail:Address:
505 Knolle Court
Saint Augustine, FL 32092Telephone:
+1 321-766-9495
Expected salary:
Location: Ashburn, VA
Apply for the job now!
Apply Now
Company: Stellent IT
Job description: Lead PKI EngineerRemote WorkPhone and VideoLong TermJob Description:We have a permanent position for a Lead PKI Engineer. Due to the nature of the work, you must be a US citizen to apply. This role is remote (East is preferred but anywhere in the US is fine.) This role requires travel inside the US about once per quarter for meetings or conferences. Details below. If interested, SEND RESUME. Job Overview This position is for the Lead PKI Engineer who will design, document, and implement PKI architectures while serving as a thought leader in PKI development. Maintains, documents, and supports Public Key Infrastructure (PKI), Key Management Systems (KMS) and Hardware Security Modules (HSM). Will participate and follow key standards organizations to provide guidance to the CTO for PKI roadmap generation. Serves as the SME for PKI in partner, vendor, and customer interactions. Essential FunctionsLead and execute strategic initiatives around PKI development, deployment, and maintenance to drive class-leading product and industry leading technologyDesign and deploy infrastructure necessary to support PKI for Critical Infrastructure clientsPerform maintenance and support of Public Key Infrastructure (PKI) operationsAdminister Certification Authority (CA) certificate lifecycles for various applications and solutionsInterface with clients to document Certificate Policy, and Certification Practice Statements based on client requirementsUnderstand a Certificate Practice Statement (CPS), including areas of design, deployment, validation, operational and Disaster Recovery/Business Continuity Planning (DR/BCP)Design, test, and document Key Ceremony Scripts for PKI Key material creationAssist in proactive monitoring, alerting, trend analysis for PKI and underlying infrastructure, and support the operations team in implementationAssist in the development of analytics systems for monitoring and controlling PKI functionality in an enterprise networkEvaluate upgrades and new products & technologies for the enterprise PKI infrastructure including Post-Quantum Cryptography, supply chain traceability, device-level identities, SBOM and HBOMIdentify process improvements to reduce risk and improve operational efficiency including the use of AI in PKI operationsStrong verbal and written communication skillsStrong organizational skills and time management QualificationsBasic Qualifications5-10 years of work experience in PKI Operations/Engineering, Information Security, Cybersecurity and/or related IT operational functions, with a bachelor's degree or an advanced degreeDeep understanding of PKI policies and procedures (RFC5280, RFC3647, ITU-T X.509, ISO21188, etc.)Deep understanding of PKI components; Certification Authority, Registration Authority, CRL, OCSP, and x509 Certificates Preferred QualificationsDetailed familiarity with Internet protocols including, but not limited to TCP/IP, TLS, DNS, IPsec, OCSP, SCEP, and LDAP.DoD 8570.01 IAT II (One of the following or higher (CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) and other comparative information security certifications are preferredPankaj KumarLead IT RecruiterEmail:Address:
505 Knolle Court
Saint Augustine, FL 32092Telephone:
+1 321-766-9495
Expected salary:
Location: Ashburn, VA
Apply for the job now!
Apply Now