PKI Software Engineer

Job Description

Job Description

PKI SOFTWARE ENGINEERÂ

Ft. Meade, MD - Full Time (Hybrid)Â
Salary: 140-170K

August Schell is looking for a PKI Software Engineer to join our team in support of DoD enterprise PKI modernization with our DISA customer. The engineer will work hand-in-hand with commercial product engineering and government teams on the next generation of Public Key Infrastructure capabilities — including post-quantum cryptography (PQC) migration — within Red Hat Enterprise Linux, Red Hat Certificate System, and the upstream Dogtag PKI open-source project.Â

Individuals in this role must be able to work hybrid and go on site at Fort Meade as requested.Â

Responsibilities Include:Â

• Design, develop, test, and maintain high-quality PKI software components across Red Hat Certificate System (RHCS) and Dogtag PKIÂ

• Work software fixes and feature development directly with product engineering teams and the government development lab — owning issues end-to-end from requirements through testing and verificationÂ

• Support the program’s post-quantum cryptography migration, including PQC algorithm integration (ML-DSA) and legacy version transition planningÂ

• Develop and troubleshoot HSM integrations supporting CA operations and key escrowÂ

• Support certificate lifecycle automation (ACME) as the program transitions to shorter-lived certificates at higher issuance volumeÂ

• Practice defensive programming and contribute to testing frameworks, CI/CD pipelines, and release qualityÂ

• Communicate clearly across government stakeholders, commercial vendor engineering, and program contractors — translating technical status into program-level clarityÂ

• Proactively identify, document, and escalate risks and blockers before they impact program scheduleÂ

Requirements:Â

• Active Secret clearance minimum (Top Secret preferred and may be required)Â

• Local to the DMV area with the ability to work on site at Fort Meade as requestedÂ

• Five (5)+Â years of professional software engineering experience (flexible for candidates with exceptional PKI depth)Â

• Java and/or Rust programming experienceÂ

• Strong knowledge of Linux and its development toolsÂ

• Knowledge or experience with Linux containers and container orchestration (Podman / Docker) and VMs (KVM)Â

• Hands-on experience with PKI, x.509, cryptography, and system/software security technologiesÂ

• Direct experience with Red Hat Certificate System or Dogtag PKI (the upstream open-source project of the deployed DoD code base) — comparable enterprise CA platform experience considered (EJBCA, Microsoft AD CS, Entrust Authority, ISC CertAgent, or similar)Â

• DoD 8570/8140 IAT Level II certification (Security+ or equivalent)Â

• Strong written and verbal communication skillsÂ

Stand out with:Â

• Post-quantum cryptography familiarity (ML-DSA/Dilithium, Kyber, CNSA 2.0 timelines)Â

• HSM integration experience (Entrust nShield, Thales Luna)Â

• ACME protocol and certificate automation at scaleÂ

• Prior DISA or DoD PKI program experience (Purebred, derived credentials, RA/CRL/OCSP operations)Â

• Directory Server / LDAP experienceÂ

• Experience using AI agents to accelerate development effortsÂ

• Python, Bash, or similar scripting languagesÂ

• Package maintenance on Fedora/RHELÂ

• Agile development methodologies (Scrum, JIRA)Â

Powered by JazzHR

JKpkQqc3j6