RemoteLeaf Logo
Log in Sign up

Public Key Infrastructure (PKI) Architect

3 months, 2 weeks ago
United States
Full-time
Senior
Infrastructure Engineer
DevOps and Infrastructure
Ansible AWS Azure CI/CD Cybersecurity DevSecOps Docker HashiCorp Vault Kubernetes SonarQube Splunk
Apply Now
Capital Technology Group

Capital Technology Group

Capital Technology Group offers technical leadership and expert consulting services for enterprise architecture, application integration, custom development, big data, and search. With a focus on solving business problems through technology, CTG ensure...

Internet Software & Services
51-250
Founded 2010
View All Jobs 4

Description

  • Design, implement, and evolve PKI architectures that support secure authentication and Zero Trust initiatives.
  • Build and support cloud-native solutions across AWS and Azure environments.
  • Automate infrastructure, deployments, and operational processes using Ansible and CI/CD pipelines.
  • Partner with security and engineering teams to implement DevSecOps practices and secure software delivery.
  • Support compliance initiatives aligned with FIPS, NIST 800-53, FISMA, and Zero Trust Architecture principles.
  • Monitor, troubleshoot, and optimize application and platform performance using security and observability tools.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field, or equivalent experience.
  • 4+ years of professional experience in PKI architecture, cybersecurity engineering, IAM, infrastructure/security architecture, or enterprise platform engineering.
  • Experience designing and supporting PKI solutions in FICAM and Federal PKI (FPKI) environments.
  • Experience with X.509 certificate lifecycle management, automation, and policy development.
  • Knowledge of X.509 certificate policies and CA/Browser Forum standards.
  • Experience implementing certificate automation using ACME.
  • Experience with Hardware Security Modules (HSMs) and cryptographic key management.
  • Familiarity with Post-Quantum Cryptography (PQC) concepts and migration strategies.
  • Experience with PKI platforms such as DigiCert, Entrust, Microsoft AD CS, and Let’s Encrypt.
  • Experience supporting CAC/PIV smart cards, server, code-signing, and S/MIME certificates, including trust chains and validation.
  • Experience with AWS and/or Azure.
  • Familiarity with DevSecOps practices, CI/CD pipelines, and source control platforms such as GitHub Enterprise.
  • Understanding of security frameworks and standards including NIST, FISMA, FIPS, and Zero Trust principles.
  • Experience with Docker and Kubernetes, preferred.
  • Experience with Shibboleth, CyberArk, or HashiCorp Vault, preferred.
  • Experience with Splunk, Tenable, Checkmarx, SonarQube, or related security tooling, preferred.
  • Experience with STIG hardening, vulnerability management, or compliance programs, preferred.
  • Familiarity with PIV authentication and identity governance solutions, preferred.
  • Experience supporting highly regulated environments, including federal or public sector organizations, preferred.
  • Relevant cloud, security, or architecture certifications, preferred.
  • Applicants must be U.S. citizens and able to obtain a Public Trust clearance.

Benefits

  • Estimated annual salary range of $110,000 to $150,000.
  • Remote work, with hybrid roles specified as applicable.
  • Competitive compensation package.
  • Medical, dental, and vision coverage.
  • Life insurance, short-term disability, and long-term disability coverage.
  • Employee Assistance Program.
  • 401(k) with 4% matching.
  • Liberal PTO vacation policy.
  • Annual continuing education support.
  • Annual wellness budget.
  • Bonus incentive programs, including employee referrals and performance-based rewards.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

B Lab

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Netherlands Full-time Lead Compliance Manager Security Engineer
$55k-$66k
Cybersecurity Penetration Testing Salesforce
4 hours, 36 minutes ago
B Lab

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

United Kingdom Netherlands Brazil Full-time Lead Compliance Manager Security Engineer
$31k-$38k
Cybersecurity Penetration Testing Salesforce
4 hours, 36 minutes ago
Edmentum

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

United States Full-time Mid Level Security Engineer
$105k-$120k
Agile Penetration Testing
5 hours, 21 minutes ago
Boosta

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

Poland Ukraine Full-time Senior DevOps Engineer Security Engineer
AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers