PKI Engineer / Certificate Management Specialist

Makpar is a comprehensive professional and technical solutions provider for the Federal government, specializing in cloud engineering, data management, and cybersecurity. The PKI Engineer will support clients in PKI management and modernization, focusing on certificate lifecycle management and automation processes.

Responsibilities:

• Support Federal PKI and DHS PKI policy-aligned implementation
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance
• Support device certificate request processing through digital workflows
• Support DHS CA4 and external CA processes according to agency guidelines
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices
• Support person-centric PKI certificate authority and certificate lifecycle management systems
• Automate certificate management processes to reduce manual error and approval delays
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation
• Provide recommendations for optimizing cloud resource performance and security

Requirements:

• Experience with PKI and certificate lifecycle management
• Understanding of Federal PKI and/or DHS PKI policy
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance
• Experience with certificate authorities and certificate management systems
• Ability to support PIV-based certificate authentication and authorization
• Ability to obtain favorable EOD / suitability and maintain required access
• U.S. permanent resident status is required for employment and obtaining mandated security clearance
• Experience with DHS CA4, NPE CA, person-centric PKI, DHS 4300A, PKI interface specifications, or COPG
• Experience with HSMs, HashiCorp, Certbot, Let's Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP
• Prior DHS or federal civilian PKI experience
• Experience automating manual certificate workflows
• Experience supporting Apple/mobile device certificates