PKI Systems Engineer

PKI Systems Engineer

ABOUT US:
Soliel is an innovative, premium engineering company specializing in providing Enterprise Architecture, Network Design, Engineering, and Operations Support, Software Design and Development, Data Center Design, Deployment and Migration, and Systems Engineering services for both public and private sectors. Our Federal systems integration team manages the complexity inherent with technology change, from requirements planning to architecture, testing to deployment, and beyond. We also offer a complete range of industry-leading services, including architecture, systems development, information assurance, solution and platform integration, and program management, functional, and testing services. Over the years, Soliel's team of technical experts has consistently delivered outstanding innovative solutions and services that meet or exceed customer expectations and satisfaction.

LOCATION: Fort Meade, MD/REMOTE

START DATE: Immediate
CLEARANCE: Secret

JOB DESCRIPTION:
Soliel is seeking to hire a PKI Systems Engineer. This position will design, deploy, and maintain our enterprise cryptographic infrastructure. This role focuses heavily on Keyfactor EJBCA environments hosted on Red Hat Enterprise Linux (RHEL). The ideal candidate will serve as the subject matter expert for all certificate lifecycle management, hardware security module (HSM) integration, and Linux system hardening, ensuring the secure and continuous operation of our trust infrastructure. You will also manage robust Certificate Authority (CA) hierarchies, integrate services with cloud environments, and maintain strict cryptographic security compliance. This position requires deep technical expertise in asymmetric cryptography, X.509 standards, and automated configuration management.

KEY RESPONSIBILITIES:

• Design, implement, and maintain high-availability Enterprise PKI solutions utilizing EJBCA as the core Certificate Authority (CA) and Registration Authority (RA).
• Provision, configure, and manage Red Hat Enterprise Linux (RHEL) servers hosting the PKI environment, ensuring optimal performance, reliability, and security.
• Oversee the end-to-end lifecycle of X.509 certificates, including issuance, renewal, revocation, and automated deployment across enterprise systems.
• Deploy and manage Hardware Security Modules (HSMs) to protect root and issuing CA private keys, ensuring strict compliance with cryptographic standards (FIPS 140-2/3).
• Apply OS-level security hardening (STIGs/CIS benchmarks) to RHEL environments and ensure all PKI components are patched and vulnerability-free.
• Develop and maintain automation scripts and playbooks (e.g., Ansible, Bash) for system provisioning, configuration management, and routine operational tasks.
• Collaborate with security, architecture, and development teams to ensure secure system and application designs.
• Document system configurations, operational procedures, and troubleshooting guides.
• Participate in system upgrades, migrations, and continuous improvement initiatives.

REQUIRED SKILLS:

• Bachelor's degree in Computer Science, Engineering, or equivalent experience.
• Secret Clearance
• Five (5) years of more of knowledge and experience leveraging X.509 certificates, SSL/TLS, asymmetric cryptography, and HSM/KMS integration.
• Strong Red Hat Linux systems administration experience
• Hands-on experience configuring ACME clients/servers, SCEP, EST, and REST APIs.
• Strong scripting experience using Bash and Perl or Python
• Excellent written and verbal skills for documentation and collaboration.

Preferred Skills:

• Demonstrated ability to troubleshoot complex system and application issues across multiple layers of the stack.
• LDAP experience, specifically non-Active Directory LDAP implementations
• Experience with PostgreSQL, MariaDB database platforms
• Cryptographic engineering experience, including:
• Secure key management
• Cryptographic protocol implementation or integration

COMPENSATION:

• Salary: $165,000-180,000/year (flexible based on experience)
• Major medical, dental and vision
• Paid holidays
• Paid Time Off (PTO)
• 401k and company matching

EEO/ AA/ NON-DISCRIMINATION STATEMENT: Soliel, LLC is an Equal Opportunity/ Affirmative Action/ Non-Discriminatory Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity, age, physical or mental disability, or covered veterans. To learn more, please visit www.solielcom.com