[Hiring] PKI Engineer / Certificate Management Specialist @Makpar

Role Description

The PKI Engineer will support USCIS PKI management and modernization, including:

• Device certificate lifecycle management
• NPE certificate authority support
• Person-centric PKI
• PIV-based certificate authentication
• Automation of certificate request and approval processes

This is a specialized role. Recruiters should prioritize candidates with federal PKI, DHS PKI, certificate lifecycle, CA operations, and identity integration experience.

Key Responsibilities

• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.

Qualifications

• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required USCIS access.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.

Preferred Qualifications

• Experience with DHS CA4, NPE CA, person-centric PKI, DHS 4300A, PKI interface specifications, or COPG.
• Experience with HSMs, HashiCorp, Certbot, Let’s Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
• Prior DHS, USCIS, or federal civilian PKI experience.
• Experience automating manual certificate workflows.
• Experience supporting Apple/mobile device certificates.

Benefits

• Great benefits package
• Excellent training and career development opportunities
• Flexible work schedules
• Generous compensation package
• Encouraging environments for collaboration and inquisitiveness