freehire launches on Product Hunt on 26 August.

Follow →

Lead Security and PKI Engineer

Summary

Lead the design and deployment of DoD PKI infrastructure, migrate systems to stronger cryptography, and ensure Zero Trust compliance while supporting certificate management and security architecture.

About Us

AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.

AGE Solutions is seeking a Lead Security and PKI Engineer to provide technical leadership in DoD PKI/PKE engineering support, security architecture, and cryptographic algorithm implementation. This position requires deep knowledge of Public Key Infrastructure, certificate management, and DoD security standards.

Responsibilities Include:

  • Provide Tier III technical support for DoD PKI Portfolio infrastructure issues and PKE consultation
  • Lead CA (Certificate Authority) architecture analysis, design, enhancement, and deployment across NIPR/SIPR networks
  • Develop and execute plans for DoD migration to stronger cryptographic algorithms and Post-Quantum Computing (PQC) compliance
  • Evaluate COTS products and hardware for PKI interoperability with DoD systems
  • Provide direct consultation to end users, system administrators, developers, RA/LRA/KRA personnel, and help desk staff
  • Develop and maintain PKI security compliance documentation (STIG checklists, RMF per NIST 800-37)
  • Support Zero Trust (ZT) compliance and modernization of PKI capabilities
  • Manage large volumes of technical support tickets and provide escalation resolution

Required Skills, Qualifications, and Experience:

  • Bachelor’s Degree in Computer Science, Cybersecurity, Information Security, or related field
  • 8+ years of hands-on PKI/cryptography engineering and DoD IT security experience
  • Must have and maintain a current DoD Secret clearance
  • Deep knowledge of X.509 certificates, certificate validation, trust models, and DoD PKI architecture
  • CISSP, CISM, CEH, or equivalent information security certification highly preferred
  • Advanced understanding of cryptographic algorithms, NIST standards, and algorithm evolution
  • Expert-level knowledge of Windows, Linux, Unix, and MacOS
  • Knowledge of MS CAPI, MS CAPI NextGen, NSS, OpenSSL, and MOD NSS
  • Experience evaluating and integrating commercial PKI solutions with government systems
  • Must reside within a commutable distance of Ft. Meade, MD in order to work onsite full time

The projected salary range for this position is $140,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.

At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.

  • 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
  • Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
  • 401(k) with Match: We match 3% of your contributions with immediate vesting.
  • Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
  • Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
  • Parental Leave: 15 days of fully paid leave for new parents, because family matters.
  • Military Differential Pay: We bridge the gap for employees on active duty, so they don’t take a financial hit while serving.
  • Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
  • Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.

At AGE, you’ll do work that matters, supported by a company that delivers for its people.

What this application asks

greenhouse

First Name, Last Name, Email, Phone, Resume/CV, Cover Letter

  • Preferred First Name optional
  • LinkedIn Profile optional
  • Please select your work authorization status from the list below. choose any
  • Please select your current security clearance status from the list below. choose one
  • What is your desired salary?
  • Are you open to relocating for this position? choose one
  • Are you willing to travel for this position? choose any
  • Have you previously worked directly with AGE Solutions, or do you know anyone currently employed or contracted by AGE? choose one
  • If you answered "Yes" to the previous question, please list their name(s) and briefly describe your relationship and/or prior engagement with AGE. If you answered "No" to the previous question, please type "N/A". written answer
  • Please select your current CompTIA certifications from the list below. If you do not currently have any CompTIA certifications, please select "None". choose any
  • Please select your current ISC2 certifications from the list below. If you do not currently have any ISC2 certifications, please select "None". choose any
  • Please select your current ISACA certifications from the list below. If you do not currently have any ISACA certifications, please select "None". choose any
  • Please select your current EC-Council certifications from the list below. If you do not currently have any EC-Council certifications, please select "None". choose any
  • Please select your current SANS Institute certifications from the list below. If you do not currently have any SANS Institute certifications, please select "None". choose any
  • Please select your current OffSec certifications from the list below. If you do not currently have any OffSec certifications, please select "None". choose any
  • Please select your current Project Management Institute (PMI) certifications from the list below. If you do not currently have any PMI certifications, please select "None". choose any
  • Please select your current Cisco certifications from the list below. If you do not currently have any Cisco certifications, please select "None". choose any
  • Please select your current Juniper Networks certifications from the list below. If you do not currently have any Juniper Networks certifications, please select "None". choose any
  • Please select your current AWS certifications from the list below. If you do not currently have any AWS certifications, please select "None". choose any
  • Please select your current Microsoft certifications from the list below. If you do not currently have any Microsoft certifications, please select "None". choose any
  • Please select your current VMware certifications from the list below. If you do not currently have any VMware certifications, please select "None". choose any
  • Please select your current Google Cloud certifications from the list below. If you do not currently have any Google Cloud certifications, please select "None". choose any
  • Please select your current BICSI certifications from the list below. If you do not currently have any BICSI certifications, please select "None". choose any

See also