> Markdown version of [/jobs/ext/576660-public-key-infrastructure-pki-architect](https://www.wearedevelopers.com/jobs/ext/576660-public-key-infrastructure-pki-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Public Key Infrastructure (PKI) Architect - **Company:** Capital Technology Group, LLC - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Salary:** $110,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Information Systems, Continuous Integration, Federal Information Processing Standards (FIPS), Hardware Security Module, Identity and Access Management, Key Management, Multi-Purpose Internet Mail Extensions (MIME), Public Key Infrastructure, X.509, Ansible, Zero Trust Network Access, Smart Cards, Software Engineering, SonarQube, Software Vulnerability Management, Cyberark, Grafana, Infrastructure Automation Frameworks, Information Technology, Github Enterprise, Hashicorp, Checkmarx, Splunk, Software Version Control, Devsecops, Docker - **Published:** June 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=fa8cc28231804c66 ## About the Role Do you have experience in Version control?, * A collaborative engineer who enjoys solving complex technical and security challenges. * Passionate about building scalable, secure, and reliable cloud-based solutions. * Comfortable working across application development, cloud infrastructure, identity, and security domains. * Skilled at balancing technical innovation with operational excellence and compliance requirements. * An effective communicator who can work with cross-functional teams and stakeholders., * Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field (or equivalent experience) * 4+ years of professional experience in PKI architecting, cybersecurity engineering, identity and access management (IAM), infrastructure/security architecture, or enterprise platform engineering (not limited to application development) * Experience designing and supporting PKI solutions in FICAM and Federal PKI (FPKI) environments. * Experience with X.509 certificate lifecycle management, automation, and policy development. * Knowledge of X.509 certificate policies and CA/Browser Forum standards. * Experience implementing certificate automation using ACME. * Experience with Hardware Security Modules (HSMs) and cryptographic key management. * Familiarity with Post-Quantum Cryptography (PQC) concepts and migration strategies. * Experience with PKI platforms including DigiCert, Entrust, Microsoft AD CS, and Let's Encrypt. * Experience supporting CAC/PIV smart cards, server, code-signing, and S/MIME certificates, including certificate trust chains and validation. * Experience with cloud platforms such as AWS and/or Azure. * Familiarity with DevSecOps practices, CI/CD pipelines, and source control platforms such as GitHub Enterprise. * Understanding of security frameworks and standards including NIST, FISMA, FIPS, and Zero Trust principles., * Experience using Docker and Kubernetes. * Experience with Shibboleth, CyberArk, or HashiCorp Vault. * Experience with Splunk, Tenable, Checkmarx, SonarQube, or related security tooling. * Experience with STIG hardening, vulnerability management, or compliance programs. * Familiarity with PIV authentication and identity governance solutions. * Experience supporting highly regulated environments, including federal or public sector organizations. * Relevant cloud, security, or architecture certifications., * Applicants must be U.S. Citizens * Ability to obtain a Public Trust clearance ## Description CTG is seeking a PKI Architect to design, implement, and modernize enterprise Public Key Infrastructure (PKI) and identity trust services supporting mission-critical federal systems. This role is ideal for a senior technical architect with deep expertise in cryptographic systems, identity security, and scalable infrastructure design across complex, highly secure environments., * Design, implement, and evolve PKI architectures that enable secure authentication and Zero Trust initiatives * Build and support cloud-native solutions across AWS and Azure environments. * Automate infrastructure, deployments, and operational processes using Ansible and CI/CD pipelines. * Partner with security and engineering teams to implement DevSecOps practices and secure software delivery. * Support compliance initiatives aligned with FIPS, NIST 800-53, FISMA, and Zero Trust Architecture principles. * Monitor, troubleshoot, and optimize application and platform performance using security and observability tools. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)