PKI & Identity Infrastructure Engineer (FAA Enterprise Services)

Concept Solutions
Washington, DC, United States
about 1 month ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
4 years minimum
Compensation
$80,000.0 - $100,000.0
Working hours
Shift work
Job source

Tech stack

Microsoft Windows Apache HTTP Server Application Services Systems Engineering Business Systems Cyber Security Information Systems Databases Linux Hardware Security Module Internet Information Services (IIS) IT Management
+11 more
WildFly (JBoss AS) PostgreSQL Linux System Administration MariaDB Windows Servers Public Key Infrastructure Red Hat Enterprise Linux Trusted Systems Tanium Platform Expertise Wsus Docker

Job description

Concept Solutions is seeking a PKI & Identity Infrastructure Engineer (FAA Enterprise Services) supporting one of the nation’s most complex enterprise environments. We are seeking a highly skilled Senior PKI & Identity Infrastructure Engineer to serve as a technical authority across enterprise Public Key Infrastructure (PKI), identity services, directory systems, Linux/Windows administration, and secure cryptographic operations.

This role is ideal for an advanced systems engineer who thrives in high-security, large-scale federal environments and is passionate about securing enterprise authentication, certificate lifecycle management, and infrastructure resilience. You will play a key role in supporting secure digital trust across the FAA while collaborating with cybersecurity, infrastructure, and business stakeholders., * Serve as a senior technical lead for enterprise PKI architecture, administration, and operational support across Certification Authorities (CAs), Registration Authorities (RAs), and Validation Authorities (VAs)

  • Administer and maintain PKI platforms across Windows and Linux environments, including EJBCA operations, ACME, SCEP, certificate enrollment, CRL distribution, OCSP, CDP, and AIA services
  • Execute and document PKI key ceremonies, offline root CA operations, and cryptographic material handling in compliance with Certificate Policies (CP) and Certification Practice Statements (CPS)
  • Manage and maintain Hardware Security Modules (HSMs), including Thales and Luna platforms, ensuring compliance with federal cryptographic standards
  • Support secure certificate lifecycle management, validation services, and enterprise trust models, * Administer Red Hat Enterprise Linux (RHEL) environments supporting PKI, identity, and application services including patching, hardening, authentication integration, and compliance
  • Perform comprehensive Microsoft Windows Server administration including lifecycle management, patching, WSUS/Tanium baselines, hardening, backup validation, and remediation
  • Support Docker/containerized solutions aligned with enterprise deployment and security standards
  • Maintain supporting web/application infrastructure including IIS, Apache, and JBoss

Database & Operational Support

  • Support PostgreSQL and MariaDB environments for PKI and identity services
  • Perform maintenance, backup validation, availability monitoring, and operational troubleshooting
  • Ensure service reliability using SLA/SLO/SLI performance principles

Documentation, Compliance & Collaboration

  • Develop and maintain SOPs, architecture diagrams, lifecycle documentation, audit artifacts, and operational procedures
  • Partner with cybersecurity teams, FAA stakeholders, Lines of Business, and enterprise customers to support mission requirements
  • Present technical solutions clearly to both technical and non-technical stakeholders
  • Support compliance, audit readiness, and continuous service improvement

Requirements

  • Bachelor’s degree in Information Systems, IT Management, Business Systems, MIS
  • 5+ years or an additional 4+ years of relevant experience in lieu of an BS degree
  • Advanced experience supporting enterprise PKI services in large-scale environments
  • Strong expertise with Windows Server, Red Hat Enterprise Linux, and secure systems administration
  • Experience with EJBCA, certificate lifecycle management, ACME/SCEP, OCSP, and CRL
  • Hands-on experience with HSM technologies (Thales, Luna, or equivalent)
  • Knowledge of Docker/containerized infrastructure
  • Experience with IIS, Apache, JBoss, PostgreSQL, and MariaDB
  • Familiarity with federal cybersecurity, compliance, or FAA enterprise environments highly preferred

Compensation: $80K to $100K

Benefits & conditions

3.53.5 out of 5 stars Washington, DC 20591 $80,000 - $100,000 a year, Pulled from the full job description

  • Health insurance
  • 401(k) matching
  • Vision insurance
  • Dental insurance
  • Life insurance, Benefits: Concept Solutions offers a competitive benefits and salary package you would receive from a large company. We offer health, dental, vision and life insurance, as well as a comprehensive 401(k) plan with matching and immediate vesting.

About the company

Founded in 1999 and headquartered in Reston, Virginia, Concept Solutions, LLC (CS) is a leading small business in technology, engineering, and management consulting. We are the innovative and agile force behind strategic solutions that enhance organizational efficiency and safeguard our nation across Aerospace, Defense, and National Security sectors.

For over 25 years, CS has been a trusted partner for the Federal Aviation Administration (FAA), Department of Homeland Security (DHS), Department of Justice (DOJ), Department of Defense (DoD) and other federal agencies delivering vital IT, security, and project management services.

Our commitment to excellence is reflected in our adherence to CMMI-DEV ML3, ISO 9001:2015, ISO/IEC 20000-1:2018, and ISO/IEC 27001-1:2013 standards. CS boasts company highlights that include:

  • Over two decades of experience across over $300 million in contract awards supporting critical FAA programs
  • Multiple contract vehicles providing opportunities across FAA, DoD, NOAA, and other Federal agencies
  • Innovation Council - CS maintains an active Internal Research and Development (IR&D) program that is geared towards identifying emerging technologies and pursuing technological innovations

At CS, we know our success stems from our talented team. That’s why we prioritize the wellbeing and growth of our employees, fostering a positive culture centered on innovation, engagement, and career development.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:07 min

Inspecting default bridge architectures and custom Docker networks

Oliver Seitz Oliver Seitz · World Congress 2025

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · World Congress 2025

1:30 min

Operating developer-friendly identity infrastructure using Affinity Elements

Adam Larter Adam Larter · World Congress 2024

2:34 min

Docker sandbox architecture and microVM environment integration

Manuel de la Peña Manuel de la Peña · World Congress 2026 Europe

3:55 min

Demonstrating .NET installation on Debian and Azure Linux

Silvano Coriani Silvano Coriani · Europe 2026 Virtual

4:50 min

Addressing quantum enterprise pilots, LLM training, and security

John Fletcher John Fletcher +1 · World Congress 2026 Europe

Videos

See all

Related articles

See all