Senior Public Key Infrastructure (Pki) Engineer
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Remote
On-site
Compensation
$150,000-$190,000/year
Job Description
Summary:
ZTI Solutions is seeking a Senior Public Key Infrastructure (PKI) Engineer to architect, automate, and modernize enterprise PKI supporting Department of Defense and Federal customers.
This position focuses on enterprise server PKI, certificate lifecycle automation, and infrastructure trust services, not end-user certificate administration. You will modernize CA infrastructure, automate certificate management at scale, support post-quantum cryptography transition planning, and help shape Zero Trust initiatives in mission-critical DoD environments.
ZTI will sponsor Top Secret clearance processing. Benefits include 100% company-paid medical, dental, and vision for you and your family, 4 weeks PTO, and certification reimbursement.
Key Responsibilities:
- Architect, deploy, administer, and maintain enterprise PKI environments and Certificate Authority (CA) infrastructure, including Microsoft Active Directory Certificate Services (AD CS).
- Design and manage enterprise server certificate strategies across Windows, Linux, virtualization, cloud, web services, APIs, and load balancers.
- Automate certificate lifecycle management (issuance, renewal, revocation, expiration monitoring, key rotation, reporting) using ACME, SCEP/EST, REST APIs, PowerShell, Python, Bash, Ansible, or Terraform.
- Deploy, manage, and troubleshoot TLS/SSL certificates, trust chains, and certificate validation across the enterprise.
- Integrate PKI services with Active Directory, Azure, AWS, virtualization platforms, and DevSecOps pipelines.
- Support Zero Trust initiatives through machine identity and certificate-based trust.
- Support planning for post-quantum cryptography and CNSA 2.0 migration.
- Ensure PKI environments comply with NIST, FIPS, DISA STIGs, and RMF requirements.
- Participate in incident response for certificate compromise or trust-related events.
- Maintain technical documentation, architecture diagrams, SOPs, and configuration baselines.
- Provide technical leadership and mentorship to junior engineers.
Requirements:
- U.S. Citizen with an active Secret clearance; eligible for Top Secret (ZTI sponsors processing).
- Hybrid: up to 3 days/week onsite in Fairfax, VA.
- DoD 8140 IAT Level II certification (Security+ CE or higher), or ability to obtain within 90 days.
- 8+ years of systems/security engineering experience with 4+ years focused on enterprise PKI (or 12 years total without a degree).
- Experience administering AD CS or comparable enterprise PKI platforms.
- Experience automating certificate lifecycle management at scale.
- Experience administering Windows Server and/or Linux.
- Strong understanding of X.509, CRL/OCSP, enterprise trust models, cryptographic algorithms, and key management.
- Excellent analytical, problem-solving, and communication skills.
Preferred Qualifications:
- CISSP, Azure Security Engineer Associate, or AWS Certified Security - Specialty.
- Experience with Entrust, DigiCert, EJBCA, Keyfactor, Venafi, or similar platforms.
- Hardware Security Module (HSM) experience.
- Azure Government, AWS GovCloud, or hybrid cloud environments.
- PKI integration with Kubernetes, containers, or service mesh.
- Experience supporting DoD RMF, FedRAMP, or CMMC compliance initiatives.
Benefits:
- 4 weeks PTO plus all federal holidays paid.
- 100% company-paid medical, dental, and vision for employees and their families.
- 4% matching 401(k).
- Professional training and certification reimbursement.
- Flexible hybrid work environment.
ZTI Solutions, LLC was founded in 1997 in Virginia and is classified as a small business. The company is owned and operated by its founder, Rudy Zadnik, who emphasizes moral and business excellence over increasing company profits. This results in a more customer-oriented attitude towards mission accomplishment, as opposed to growing profits or sales.Our approach to consulting and engineering centers around using only highly skilled personnel who are seasoned industry veterans. All employees hold high-level industry and vendor certifications. We offer a comprehensive set of consulting and staff augmentation services, primarily focused on networking and security consulting in the classified space.
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
FAQs About Senior Public Key Infrastructure (Pki) Engineer Jobs at ZTI Solutions, LLC
What is the work location for this position at ZTI Solutions, LLC?
This job at ZTI Solutions, LLC is located in Fairfax, VA, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.
What pay range can candidates expect for this role at ZTI Solutions, LLC?
Candidates can expect a pay range of $150,000 and $190,000 per year.
What employment applies to this position at ZTI Solutions, LLC?
The employer has not provided this information. This may be discussed during the hiring process.
What is the process to apply for this position at ZTI Solutions, LLC?
You can apply for this role at ZTI Solutions, LLC either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.