> Markdown version of [/jobs/ext/1277012-senior-pki-engineer](https://www.wearedevelopers.com/jobs/ext/1277012-senior-pki-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior PKI Engineer

- **Company:** 99999 Consulting Llc
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $250,000.0
- **Contract:** Permanent contract
- **Skills:** Web Servers, Networking Hardware, Key Management, OpenSSL, Public Key Infrastructure, X.509, Transport Layer Security, Load Balancing
- **Published:** July 15, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=483d2b6e52fc0906

## About the Role

* 8+ years experience in PKI, security engineering, or related systems roles in secure/cleared environments
 * Active TS; must be able to obtain TS/SCI
 * Professional certification required; expert-level capability preferred
 * Demonstrated ability to design and troubleshoot PKI systems across multiple platforms and vendors
 * Experience with complex trust models and real-world certificate interoperability challenges
 * DoD 8140 compliance required

## Description

* Work centers on designing and maintaining trust models that other systems depend on, often with little margin for error.
 * Problems are rarely straightforward-solutions must account for vendor constraints, security requirements, and interoperability edge cases.
 * Ownership of PKI architecture and implementation from policy design through operational support.
 * High OPTEMPO; requires precision, persistence, and disciplined follow-through.

What You'll Do

 * Design and manage PKI architectures, including root/intermediate hierarchies, chains of trust, and certificate lifecycle processes.
 * Create and maintain segmented trust models (organizational partitions, cross-domain trust, constrained intermediates).
 * Generate and support certificates for diverse use cases, including handling vendor-specific constraints and non-standard requirements (e.g., wildcard usage, SAN configurations, custom extensions).
 * Troubleshoot certificate validation issues across systems, applications, and network boundaries.
 * Collaborate with systems, network, and application teams to ensure certificates function correctly within their environments.
 * Define and enforce certificate policies, revocation strategies (CRL/OCSP), and security controls.
 * Mentor engineers on PKI fundamentals and correct implementation practices.

Tech Knowledge / Skills

 * PKI fundamentals: X.509, certificate chains, trust stores, key management
 * Microsoft CA, OpenSSL, and other PKI tooling
 * TLS/SSL, mutual authentication, certificate-based access control
 * CRL, OCSP, revocation and lifecycle management
 * Integration points: web servers, load balancers, applications, network devices


## Related Videos

- [Post-Quantum Cryptography: Preparing for Q-Day](https://www.wearedevelopers.com/videos/100179-post-quantum-cryptography-preparing-for-q-day)
- [Get ready to Rustle](https://www.wearedevelopers.com/videos/698-get-ready-to-rustle)
- [Robots Run Wild, Massive Crime Data Leak and AI Replaces Models - David Benson](https://www.wearedevelopers.com/videos/1849-robots-run-wild-massive-crime-data-leak-and-ai-replaces-models-david-benson)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Closing Keynote by Joel Spolsky](https://www.wearedevelopers.com/videos/615-closing-keynote-by-joel-spolsky)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)