RemoteLeaf Logo
Log in Sign up

Public Key Infrastructure (PKI) Architect

2 months, 4 weeks ago
United States
Full-time
Senior
Infrastructure Engineer
DevOps and Infrastructure
Ansible AWS Azure CI/CD Cybersecurity DevSecOps Docker HashiCorp Vault Kubernetes SonarQube Splunk
Apply Now
Capital Technology Group

Capital Technology Group

Capital Technology Group offers technical leadership and expert consulting services for enterprise architecture, application integration, custom development, big data, and search. With a focus on solving business problems through technology, CTG ensure...

Internet Software & Services
51-250
Founded 2010
View All Jobs 4

Description

  • Design, implement, and evolve PKI architectures that support secure authentication and Zero Trust initiatives.
  • Build and support cloud-native solutions across AWS and Azure environments.
  • Automate infrastructure, deployments, and operational processes using Ansible and CI/CD pipelines.
  • Partner with security and engineering teams to implement DevSecOps practices and secure software delivery.
  • Support compliance initiatives aligned with FIPS, NIST 800-53, FISMA, and Zero Trust Architecture principles.
  • Monitor, troubleshoot, and optimize application and platform performance using security and observability tools.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field, or equivalent experience.
  • 4+ years of professional experience in PKI architecture, cybersecurity engineering, IAM, infrastructure/security architecture, or enterprise platform engineering.
  • Experience designing and supporting PKI solutions in FICAM and Federal PKI (FPKI) environments.
  • Experience with X.509 certificate lifecycle management, automation, and policy development.
  • Knowledge of X.509 certificate policies and CA/Browser Forum standards.
  • Experience implementing certificate automation using ACME.
  • Experience with Hardware Security Modules (HSMs) and cryptographic key management.
  • Familiarity with Post-Quantum Cryptography (PQC) concepts and migration strategies.
  • Experience with PKI platforms such as DigiCert, Entrust, Microsoft AD CS, and Let’s Encrypt.
  • Experience supporting CAC/PIV smart cards, server, code-signing, and S/MIME certificates, including trust chains and validation.
  • Experience with AWS and/or Azure.
  • Familiarity with DevSecOps practices, CI/CD pipelines, and source control platforms such as GitHub Enterprise.
  • Understanding of security frameworks and standards including NIST, FISMA, FIPS, and Zero Trust principles.
  • Experience with Docker and Kubernetes, preferred.
  • Experience with Shibboleth, CyberArk, or HashiCorp Vault, preferred.
  • Experience with Splunk, Tenable, Checkmarx, SonarQube, or related security tooling, preferred.
  • Experience with STIG hardening, vulnerability management, or compliance programs, preferred.
  • Familiarity with PIV authentication and identity governance solutions, preferred.
  • Experience supporting highly regulated environments, including federal or public sector organizations, preferred.
  • Relevant cloud, security, or architecture certifications, preferred.
  • Applicants must be U.S. citizens and able to obtain a Public Trust clearance.

Benefits

  • Estimated annual salary range of $110,000 to $150,000.
  • Remote work, with hybrid roles specified as applicable.
  • Competitive compensation package.
  • Medical, dental, and vision coverage.
  • Life insurance, short-term disability, and long-term disability coverage.
  • Employee Assistance Program.
  • 401(k) with 4% matching.
  • Liberal PTO vacation policy.
  • Annual continuing education support.
  • Annual wellness budget.
  • Bonus incentive programs, including employee referrals and performance-based rewards.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Zscaler

Insider Risk Security Engineer

Zscaler 1K-5K Internet Software & Services

Zscaler is hiring a remote U.S. Insider Risk Security Engineer to strengthen its Enterprise Security insider-risk program through investigations, detection engineering, playbook development, and stakeholder engagement.

United States Full-time Senior Security Engineer
$134k-$168k
JavaScript Python SIEM
1 hour, 4 minutes ago
Iterable

Senior Director, Security Engineering

Iterable 251-1K Media

Iterable is hiring a Senior Director, Security Engineering to lead its global security organization and technical security portfolio, strengthening product, platform, application, detection, and response capabilities while advancing an AI-forward security strategy.

United States Full-time Executive Security Engineer
$220k-$300k
1 hour, 19 minutes ago
Robots & Pencils

Staff Cloud Architect L4

Robots & Pencils 51-250 IT Services

Robots & Pencils is seeking a Staff Cloud Architect for a six-month contract to lead end-to-end architecture and delivery of complex cloud, data, and AI/ML systems for enterprise client engagements.

United States Canada Contract Lead Infrastructure Engineer
$77k-$108k
Apache Airflow Apache Spark AWS Azure CI/CD dbt Docker GitHub Actions HIPAA Hugging Face Kafka Kubernetes Machine Learning Microservices MLflow MLOps MongoDB PostgreSQL Prefect Pulumi Python PyTorch Serverless Snowflake TensorFlow Terraform Vertex AI
1 hour, 34 minutes ago
Garner Health

Senior Security Engineer

Garner Health Specialized Consumer Services

Garner Health is hiring a Senior Security Engineer to protect patient data by securing cloud infrastructure, applications, systems, and databases while helping embed security across its healthcare platform.

United States Full-time Mid Level Security Engineer
$209k-$250k
AWS CrowdStrike Kubernetes Network Security Python REST API Terraform
1 hour, 34 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers