RemoteLeaf Logo
Log in Sign up

Public Key Infrastructure (PKI) Architect

3 weeks, 1 day ago
United States
Full-time
Senior
Infrastructure Engineer
DevOps and Infrastructure
Ansible AWS Azure CI/CD Cybersecurity DevSecOps Docker HashiCorp Vault Kubernetes SonarQube Splunk
Apply Now
Capital Technology Group

Capital Technology Group

Capital Technology Group offers technical leadership and expert consulting services for enterprise architecture, application integration, custom development, big data, and search. With a focus on solving business problems through technology, CTG ensure...

Internet Software & Services
51-250
Founded 2010
View All Jobs 3

Description

  • Design, implement, and evolve PKI architectures that support secure authentication and Zero Trust initiatives.
  • Build and support cloud-native solutions across AWS and Azure environments.
  • Automate infrastructure, deployments, and operational processes using Ansible and CI/CD pipelines.
  • Partner with security and engineering teams to implement DevSecOps practices and secure software delivery.
  • Support compliance initiatives aligned with FIPS, NIST 800-53, FISMA, and Zero Trust Architecture principles.
  • Monitor, troubleshoot, and optimize application and platform performance using security and observability tools.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field, or equivalent experience.
  • 4+ years of professional experience in PKI architecture, cybersecurity engineering, IAM, infrastructure/security architecture, or enterprise platform engineering.
  • Experience designing and supporting PKI solutions in FICAM and Federal PKI (FPKI) environments.
  • Experience with X.509 certificate lifecycle management, automation, and policy development.
  • Knowledge of X.509 certificate policies and CA/Browser Forum standards.
  • Experience implementing certificate automation using ACME.
  • Experience with Hardware Security Modules (HSMs) and cryptographic key management.
  • Familiarity with Post-Quantum Cryptography (PQC) concepts and migration strategies.
  • Experience with PKI platforms such as DigiCert, Entrust, Microsoft AD CS, and Let’s Encrypt.
  • Experience supporting CAC/PIV smart cards, server, code-signing, and S/MIME certificates, including trust chains and validation.
  • Experience with AWS and/or Azure.
  • Familiarity with DevSecOps practices, CI/CD pipelines, and source control platforms such as GitHub Enterprise.
  • Understanding of security frameworks and standards including NIST, FISMA, FIPS, and Zero Trust principles.
  • Experience with Docker and Kubernetes, preferred.
  • Experience with Shibboleth, CyberArk, or HashiCorp Vault, preferred.
  • Experience with Splunk, Tenable, Checkmarx, SonarQube, or related security tooling, preferred.
  • Experience with STIG hardening, vulnerability management, or compliance programs, preferred.
  • Familiarity with PIV authentication and identity governance solutions, preferred.
  • Experience supporting highly regulated environments, including federal or public sector organizations, preferred.
  • Relevant cloud, security, or architecture certifications, preferred.
  • Applicants must be U.S. citizens and able to obtain a Public Trust clearance.

Benefits

  • Estimated annual salary range of $110,000 to $150,000.
  • Remote work, with hybrid roles specified as applicable.
  • Competitive compensation package.
  • Medical, dental, and vision coverage.
  • Life insurance, short-term disability, and long-term disability coverage.
  • Employee Assistance Program.
  • 401(k) with 4% matching.
  • Liberal PTO vacation policy.
  • Annual continuing education support.
  • Annual wellness budget.
  • Bonus incentive programs, including employee referrals and performance-based rewards.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Raya

DevSecOps Engineer

Raya 51-250 Internet Software & Services

Raya is looking for a DevOps-Security-focused engineer to harden its AWS/EKS environment and systematically resolve security findings across cloud and delivery systems.

Anywhere Full-time Mid Level DevOps Engineer Security Engineer
$160k-$190k
AWS CDN Kubernetes Network Security Terraform WAF
9 hours, 52 minutes ago
AHEAD

Forward Deployed Engineer - AI SOC

AHEAD 1K-5K IT Services

AHEAD is hiring a Forward Deployed Engineer to deploy and operationalize security and AI capabilities in customer and enterprise environments, turning complex requirements into scalable production solutions.

United States Full-time Senior AI Engineer Security Engineer
$160k-$200k
Apache Spark AWS Azure Bash CI/CD Databricks GCP Kafka LLM Machine Learning PowerShell Python REST API SIEM Snowflake
9 hours, 52 minutes ago
AJAIA | AI Consultancy

IT Security Manager

AJAIA | AI Consultancy 1-10 management consulting

Ajaia is seeking an IT Security Manager to own day-to-day IT operations, security, and compliance across a multi-cloud environment while supporting the company’s AI-first internal workflows and growing infrastructure.

Philippines Poland Portugal Romania India Czech Republic Full-time Mid Level Security Engineer
$30k-$35k
Azure Bash CI/CD GCP HIPAA PowerShell Python SIEM
9 hours, 52 minutes ago
Anaplan

Senior Manager, Security Architecture

Anaplan 1K-5K Internet Software & Services

Anaplan is hiring a Director of Security Architecture to lead its formal security architecture practice and set the standards that guide secure-by-design development across its enterprise planning platform and AI products.

United Kingdom Full-time Lead Security Engineer
Encryption
1 day, 9 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers