Concept Solutions is seeking a PKI & Identity Infrastructure Engineer (FAA Enterprise Services) supporting one of the nation’s most complex enterprise environments. We are seeking a highly skilled Senior PKI & Identity Infrastructure Engineer to serve as a technical authority across enterprise Public Key Infrastructure (PKI), identity services, directory systems, Linux/Windows administration, and secure cryptographic operations.
This role is ideal for an advanced systems engineer who thrives in high-security, large-scale federal environments and is passionate about securing enterprise authentication, certificate lifecycle management, and infrastructure resilience. You will play a key role in supporting secure digital trust across the FAA while collaborating with cybersecurity, infrastructure, and business stakeholders.
Enterprise PKI & Cryptographic Services
- Serve as a senior technical lead for enterprise PKI architecture, administration, and operational support across Certification Authorities (CAs), Registration Authorities (RAs), and Validation Authorities (VAs)
- Administer and maintain PKI platforms across Windows and Linux environments, including EJBCA operations, ACME, SCEP, certificate enrollment, CRL distribution, OCSP, CDP, and AIA services
- Execute and document PKI key ceremonies, offline root CA operations, and cryptographic material handling in compliance with Certificate Policies (CP) and Certification Practice Statements (CPS)
- Manage and maintain Hardware Security Modules (HSMs), including Thales and Luna platforms, ensuring compliance with federal cryptographic standards
- Support secure certificate lifecycle management, validation services, and enterprise trust models
Identity Infrastructure & Systems Administration
- Administer Red Hat Enterprise Linux (RHEL) environments supporting PKI, identity, and application services including patching, hardening, authentication integration, and compliance
- Perform comprehensive Microsoft Windows Server administration including lifecycle management, patching, WSUS/Tanium baselines, hardening, backup validation, and remediation
- Support Docker/containerized solutions aligned with enterprise deployment and security standards
- Maintain supporting web/application infrastructure including IIS, Apache, and JBoss
Database & Operational Support
- Support PostgreSQL and MariaDB environments for PKI and identity services
- Perform maintenance, backup validation, availability monitoring, and operational troubleshooting
- Ensure service reliability using SLA/SLO/SLI performance principles
Documentation, Compliance & Collaboration
- Develop and maintain SOPs, architecture diagrams, lifecycle documentation, audit artifacts, and operational procedures