PKI/PKE Engineer

Job Description

Requirements
- -----------

### Must have:

### - We require at least 3 years of progressive experience in PKI/PKE administration. - We require a bachelors degree in computer science or a closely related discipline. - We need strong knowledge of asymmetric and symmetric cryptography, hashing methods such as SHA-256 and SHA-384, and key protocols including OCSP, SCEP, EST, and CMP. - We expect proficiency with PowerShell, Python, or OpenSSL for automating certificate workflows and maintaining inventories. - We look for familiarity with X.509 standards, NIST SP 800-53/175, and RFC 5280. - The ability to obtain a Secret-level government security clearance is required; active clearance is preferred. - The ability to obtain CompTIA Security+ certification is required; an active certification is preferred.

Responsibilities:
- ----------------

- We design, deploy, and support secure systems that protect digital identity and data confidentiality. - We serve as the technical lead for Certificate Authorities, Hardware Security Modules, and encryption service integrations across enterprise environments. - We build and maintain multi-tier Certificate Authority structures, including Root, Subordinate, and Issuing CAs, using platforms such as Microsoft ADCS, Entrust, or DigiCert. - We enable web, mobile, and IoT applications to use certificates for S/MIME email encryption, TLS/SSL, and 802.1X network authentication. - We implement and manage Certificate Lifecycle Management tools such as Venafi, Keyfactor, or AppViewX to automate renewals and reduce outage risk. - We oversee the physical and logical lifecycle of Hardware Security Modules such as Thales/nCipher or Utimaco. - We draft and enforce the Certificate Policy and Certification Practice Statement to support legal, operational, and regulatory compliance, including FIPS 140-2/3. - We lead the organizations transition to Post-Quantum Cryptography to strengthen defenses against future decryption threats. - We act as the subject matter expert for certificate outages, compromised keys, and emergency revocation processes such as CRL and OCSP.
- -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Company:
- -------

We are Capgemini Government Solutions (CGS) LLC, supporting mission-critical government clients with secure and innovative technology services. You will join a high-performing team and collaborate with a wide range of stakeholders while helping expand our PKI/PKE capabilities and strengthening your technical and consulting expertise. Capgemini is a global business and technology transformation partner with more than 340,000 team members in over 50 countries, known for delivering end-to-end services across strategy, design, engineering, AI, cloud, and data. For this full-time role, the base salary range for the tagged location is $100k-$120k, and the position may also be eligible for additional variable compensation, bonus, or commission. Eligible full-time employees receive paid time off, medical, dental, vision, and 401(k) benefits. Applicants must have valid U.S. work authorization that does not and will not require visa sponsorship.
- ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------