Capital Technology Group

Public Key Infrastructure (PKI) Architect

Remote (US) · Full-time

No sponsorship$110k-$150kDetected 8 days ago

GitAWSAzureCloud PlatformsDockerAnsibleCI/CDPlatform EngineeringData AnalysisCybersecurityAgileZero TrustCollaboration

About the role

Automate infrastructure, deployments, and operational processes using Ansible and CI/CD pipelines.
A collaborative engineer who enjoys solving complex technical and security challenges.

Capital Technology Group provides expert consulting services software development, digital transformation, human-centered design, data analytics and visualization, and cybersecurity.
Our multidisciplinary teams use agile methodologies to rapidly and incrementally deliver value in close collaboration with our clients.
The quality of our work has been recognized by our partners and peers through our inclusion in the Digital Services Coalition, a group of forward- thinking firms recognized for excellence in delivering IT services.
This role is ideal for a senior technical architect with deep expertise in cryptographic systems, identity security, and scalable infrastructure design across complex, highly secure environments.
Design, implement, and evolve PKI architectures that enable secure authentication and Zero Trust initiatives
Partner with security and engineering teams to implement DevSecOps practices and secure software delivery.
Support compliance initiatives aligned with FIPS, NIST 800-53, FISMA, and Zero Trust Architecture principles.

applicants MUST BE US Citizens and be able to obtain Public Trust clearance
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Mathematics, or a related technical field (or equivalent experience)
4+ years of professional experience in PKI architecting, cybersecurity engineering, identity and access management (IAM), infrastructure/security architecture, or enterprise platform engineering (not limited to application development)
Experience designing and supporting PKI solutions in FICAM and Federal PKI (FPKI) environments.
Experience with X.509 certificate lifecycle management, automation, and policy development.
Knowledge of X.509 certificate policies and CA/Browser Forum standards.
Experience implementing certificate automation using ACME.
Experience with Hardware Security Modules (HSMs) and cryptographic key management.
Familiarity with Post-Quantum Cryptography (PQC) concepts and migration strategies.
Experience with PKI platforms including DigiCert, Entrust, Microsoft AD CS, and Let's Encrypt.
Experience supporting CAC/PIV smart cards, server, code-signing, and S/MIME certificates, including certificate trust chains and validation.

Experience using Docker and Kubernetes.
Experience with Shibboleth, CyberArk, or HashiCorp Vault.
Experience with Splunk, Tenable, Checkmarx, SonarQube, or related security tooling.
Experience with STIG hardening, vulnerability management, or compliance programs.
Familiarity with PIV authentication and identity governance solutions.
Experience supporting highly regulated environments, including federal or public sector organizations.
Relevant cloud, security, or architecture certifications.
Client Requirements

Comfortable working across application development, cloud infrastructure, identity, and security domains.
Understanding of security frameworks and standards including NIST, FISMA, FIPS, and Zero Trust principles.

We are committed to offering a competitive salary for this position, with an estimated range of $110,000 to $150,000 annually.
Competitive Compensation Package
Generous Annual Continuing Education
Annual Wellness Budget
Bonus Incentive Programs (Employee referrals and performance-based rewards)

CTG is seeking a PKI Architect to design, implement, and modernize enterprise Public Key Infrastructure (PKI) and identity trust services supporting mission-critical federal systems.

This listing is sourced directly from Capital Technology Group's careers page and normalized into a canonical job model.