Senior Public Key Infrastructure Engineer

Requirements:

• Experience working in an agile development methodology, such as Kanban or Scrum
• Hands-on experience with the Venafi Certificate Lifecycle Management tool, including in-depth knowledge of key management and role-based access control (RBAC)
• Familiarity with integration and enrollment through defined workflows
• Experience producing manual and automated reports through Venafi
• Experience with continuous delivery and deployment
• Experience assessing data protection approaches, requirements, and activities
• Knowledge of Certificate Authorities, two-factor authentication, MFA, LDAP directories, OCSP, ICAM, and related standards
• Understanding of cryptography, key management, masking, tokenization, or other data protection technologies
• Experience using and deploying encryption technologies such as TLS, PGP, PKI, and HSM
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing methods, principles, and concepts
• Understanding of SSH, especially configuring and using SSH keys for authentication
• Experience with high-level scripting languages such as Python and shell scripting in KSH, Bash, and PowerShell
• Knowledge and experience with network and system security solutions, concepts, and technologies
• Experience with distributed platforms such as Linux; Windows Server experience is a plus
• Strong verbal and written communication skills and comfort working across organizational levels
• Ability to collaborate and negotiate effectively with internal stakeholders
• Ability to manage and prioritize multiple projects with competing resource needs and timelines
• 10+ years of experience in an IT infrastructure-related role, including associated design experience
• Preferred: Experience with server configuration management and infrastructure automation tools such as Ansible or Puppet
• Preferred: Experience supporting enterprise server hardware, including Dell or HP
• Preferred: Experience with identity management solutions such as IBM TIM/TAM
• Preferred: Experience with IoT devices and management
• Experience designing and implementing integrations for Red Hat products such as IdM, Satellite, RHV, RHDS, and Ceph
• AWS cloud experience with core services such as EC2, S3, ALB/NLB, Lambda, and RDS
• Experience designing, optimizing, and troubleshooting public cloud platforms supporting large, complex application stacks
• 3+ years of experience in a PKI environment; AWS public cloud experience is a plus
• Hands-on AWS experience designing and managing cloud solutions
• Preferred: Previous experience as a Technical Architect, Solutions Architect, Technical Design Authority, or Solutions Designer

Responsibilities:

• Develop and implement processes and controls for Certificate Authority management, Active Directory, and platform authentication across Windows and Unix
• Develop and integrate tools to automate and manage the Public Key Infrastructure while maintaining auditability for system management
• Work across Security and Infrastructure teams to support full integration and automation

Technologies:

• AWS
• Lambda
• Active Directory
• Ansible
• Architect
• Bash
• Cloud
• Cryptography
• Ceph
• EC2
• Hardware
• HSM
• IBM
• IoT
• Support
• Kanban
• LDAP
• Linux
• Network
• PowerShell
• Puppet
• Python
• RBAC
• Security
• Unix
• Windows
• DevOps

More

We are seeking a Public Key Infrastructure (PKI) Engineer. The pay range is $61.00–$66.00 per hour. We offer medical, dental, and vision insurance; a 401(k) retirement plan; a health savings account; short- and long-term disability insurance; life and AD&D insurance; paid sick leave where required by law; supplemental insurance plans; identity theft protection; pet insurance; employee wellness programs; an employee assistance program; and career growth and professional development opportunities. Benefit eligibility, accrual rates, and usage limits may vary by employment status, length of service, and work location, and paid sick leave follows applicable state and local requirements. Cynet Systems Inc. was founded in 2010 and is headquartered in the Washington, DC metro area. We provide technology staffing and workforce solutions to Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada, with services spanning IT, engineering, life sciences, clinical, and professional staffing. We are a nationally and locally certified Minority Business Enterprise and hold ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II certifications.

last updated 43 week of 2026