> Markdown version of [/jobs/ext/1796259-pki-software-engineer](https://www.wearedevelopers.com/jobs/ext/1796259-pki-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # PKI Software Engineer - **Company:** August Schell - **Location:** Meade, KS, United States - **Experience:** Expert - **Salary:** $140,000.0 - $170,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Artificial Intelligence, Bash Shell, Linux, Programming Tools, Python (Programming Language), Kernel-Based Virtual Machine, Lightweight Directory Access Protocols (LDAP), Public Key Infrastructure, X.509, Red Hat Enterprise Linux, Linux Containers, Software Engineering, Scripting, Software Security, Kubernetes, Directory Server, Fedora, Docker - **Published:** July 17, 2026 - **Apply:** https://www.dice.com/job-detail/628bcf68-f0d8-4d83-89da-aa293b8cfd16 ## About the Role * Active Secret clearance minimum (Top Secret preferred and may be required) * Local to the DMV area with the ability to work on site at Fort Meade as requested * Five (5)+ years of professional software engineering experience (flexible for candidates with exceptional PKI depth) * Java and/or Rust programming experience * Strong knowledge of Linux and its development tools * Knowledge or experience with Linux containers and container orchestration (Podman / Docker) and VMs (KVM) * Hands-on experience with PKI, x.509, cryptography, and system/software security technologies * Direct experience with Red Hat Certificate System or Dogtag PKI (the upstream open-source project of the deployed DoD code base) - comparable enterprise CA platform experience considered (EJBCA, Microsoft AD CS, Entrust Authority, ISC CertAgent, or similar) * DoD 8570/8140 IAT Level II certification (Security+ or equivalent) * Strong written and verbal communication skills Stand out with: * Post-quantum cryptography familiarity (ML-DSA/Dilithium, Kyber, CNSA 2.0 timelines) * HSM integration experience (Entrust nShield, Thales Luna) * ACME protocol and certificate automation at scale * Prior DISA or DoD PKI program experience (Purebred, derived credentials, RA/CRL/OCSP operations) * Directory Server / LDAP experience * Experience using AI agents to accelerate development efforts * Python, Bash, or similar scripting languages * Package maintenance on Fedora/RHEL ## Description August Schell is looking for a PKI Software Engineer to join our team in support of DoD enterprise PKI modernization with our DISA customer. The engineer will work hand-in-hand with commercial product engineering and government teams on the next generation of Public Key Infrastructure capabilities - including post-quantum cryptography (PQC) migration - within Red Hat Enterprise Linux, Red Hat Certificate System, and the upstream Dogtag PKI open-source project. Individuals in this role must be able to work hybrid and go on site at Fort Meade as requested. Responsibilities Include: * Design, develop, test, and maintain high-quality PKI software components across Red Hat Certificate System (RHCS) and Dogtag PKI * Work software fixes and feature development directly with product engineering teams and the government development lab - owning issues end-to-end from requirements through testing and verification * Support the program's post-quantum cryptography migration, including PQC algorithm integration (ML-DSA) and legacy version transition planning * Develop and troubleshoot HSM integrations supporting CA operations and key escrow * Support certificate lifecycle automation (ACME) as the program transitions to shorter-lived certificates at higher issuance volume * Practice defensive programming and contribute to testing frameworks, CI/CD pipelines, and release quality * Communicate clearly across government stakeholders, commercial vendor engineering, and program contractors - translating technical status into program-level clarity * Proactively identify, document, and escalate risks and blockers before they impact program schedule ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [Post-Quantum Cryptography: Preparing for Q-Day](https://www.wearedevelopers.com/videos/100179-post-quantum-cryptography-preparing-for-q-day) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)