In PersonApplicants must be U.S. citizens or current green card holders with three consecutive years of U.S. residence.
CybersecuritySecurity Engineering & Architecture
No H1B Sponsorship
US Citizenship Required
About the job
Requirements
A minimum of five years of relevant IT or engineering experience, including at least one to two years of cloud support experience.
Hands-on experience with credential management systems including Intercede MyID, HID solutions, PKI infrastructures, and certificate lifecycle management platforms.
Proven experience troubleshooting drivers, middleware, credentialing software, and authentication technologies.
Experience supporting and engineering Windows environments, and performing DBA responsibilities for Intercede or similar systems.
Ability to obtain and maintain a Federal or Department of Defense Public Trust clearance; candidates must receive adjudication before onboarding.
A BA/BS in Computer Science, Information Systems, Business, or a related field.
U.S. citizenship or documented eligibility to work in the United States is required. Candidates must be a U.S. citizen or current green card holder with the last three consecutive years as a U.S. resident.
Candidates must undergo a Government investigation after receiving a conditional offer and meet eligibility requirements for Government clearance.
Verification of past employment, education, and references is required.
Responsibilities
Provide engineering, operational, and lifecycle support for HSPD-12 and PIV credentialing environments in alignment with FICAM, NIST, FISMA, and agency policy requirements.
Engineer, maintain, and enhance credential management platforms including Intercede MyID, HID credentialing technologies, supporting middleware, smart card components, and Windows Server and database infrastructure.
Manage core PIV/PKI infrastructure including Hardware Security Modules, Certificate Authorities, Registration Authorities, certificate profiles, key management systems, and OCSP/CRL services.
Oversee secure configuration, patching, firmware updates, backups, monitoring, and lifecycle management for HSMs and PKI systems supporting certificate issuance and PIV key generation.
Support cloud-hosted PIV/PKI services in AWS and Azure, including virtualized CAs, credentialing applications, and HSM-integrated workloads.
Use Terraform, Ansible, and automation frameworks to provision, configure, and maintain secure, compliant cloud and hybrid environments hosting PIV and certificate services.
Implement policy-as-code, configuration baselines, and automated deployments to enforce HSPD-12, NIST, and FICAM requirements consistently.
Automate deployment and maintenance of PIV credentialing applications, PKI services, middleware, and supporting components to ensure reliable and secure operations.
Implement monitoring and alerting for critical PIV/PKI functions including certificate operations, HSM health, OCSP/CRL endpoints, issuance errors, and authentication performance.
Troubleshoot issues across the credentialing ecosystem, including authentication devices, drivers, middleware, certificate chains, cryptographic services, and trust store configurations, across cloud and on-premises environments.
Support credential lifecycle operations including issuance, activation, suspension, revocation, renewal, auditing, and compliance documentation.
Maintain operational baselines, perform root cause analysis of recurring PIV/PKI issues, and implement durable remediation to strengthen system reliability.
Ensure high availability, redundancy, and disaster recovery readiness across PIV and PKI infrastructure through resilient engineering and operational best practices.
Apply and enforce security best practices across cloud, on-premises, and credentialing systems to protect sensitive key material and maintain continuous compliance.
Participate in audits, assessments, and accreditation activities to support continuous authorization for PIV and PKI systems.
Work independently or as part of a cross-functional team to support mission-critical environments.
Desired Qualifications
A master's degree may substitute for four years of experience.
Experience with DevSecOps and cloud software deployments.
An active Public Trust or Suitability determination is preferred.
A3 Technology, Inc. is seeking an HSPD-12 Engineer to serve as a subject‑matter expert in credential management systems with a primary focus on HSPD-12 Technologies, including Intercede MyID and PKI. This role provides advanced engineering, troubleshooting, and cloud‑support services while collaborating with development, security, and infrastructure teams to design and maintain secure, scalable, automated solutions.
Essential Job Functions:
Provide engineering, operational, and lifecycle support for HSPD‑12 and PIV credentialing environments in alignment with FICAM, NIST, FISMA, and agency policy requirements.
Engineer, maintain, and enhance credential management platforms including Intercede MyID, HID credentialing technologies, supporting middleware, smart card components, and Windows Server/database infrastructure.
Oversee secure configuration, patching, firmware updates, backups, monitoring, and lifecycle management for HSMs and PKI systems supporting certificate issuance and PIV key generation.
Support cloud‑hosted PIV/PKI services in AWS and Azure, including virtualized CAs, credentialing applications, and HSM‑integrated workloads.
Use Terraform, Ansible, and automation frameworks to provision, configure, and maintain secure, compliant cloud and hybrid environments hosting PIV and certificate services.
Implement policy‑as‑code, configuration baselines, and automated deployments to ensure consistent enforcement of HSPD‑12, NIST, and FICAM requirements.
Automate deployment and maintenance of PIV credentialing applications, PKI services, middleware, and supporting components to ensure reliable and secure operations.
Implement monitoring and alerting for critical PIV/PKI functions including certificate operations, HSM health, OCSP/CRL endpoints, issuance errors, and authentication performance.
Troubleshoot complex issues across the credentialing ecosystem—including authentication devices, drivers, middleware, certificate chains, cryptographic services, and trust store configurations—across cloud and on‑prem environments.
Support full credential lifecycle operations including issuance, activation, suspension, revocation, renewal, auditing, and compliance documentation.
Maintain operational baselines, perform root cause analysis of recurring PIV/PKI issues, and implement durable remediation to strengthen system reliability.
Ensure high availability, redundancy, and disaster recovery readiness across PIV and PKI infrastructure through resilient engineering and operational best practices.
Apply and enforce security best practices across cloud, on‑prem, and credentialing systems to protect sensitive key material and maintain continuous compliance.
Participate in audits, assessments, and accreditation activities to support continuous authorization for PIV and PKI systems.
Work independently or as part of a cross‑functional team to support mission‑critical environments.
Required:
Minimum of FIVE (5) years of relevant IT or engineering experience, including at least 1–2 years of cloud support experience.
Hands-on experience working with credential management systems including Intercede MyID, HID solutions, PKI infrastructures, and certificate lifecycle management platforms.
Proven experience troubleshooting drivers, middleware, credentialing software, and authentication technologies.
Experience supporting and engineering Windows environments, as well as performing DBA responsibilities for Intercede or similar systems.
Ability to obtain and maintain a Federal or DoD Public Trust clearance; candidates must receive adjudication prior to onboarding.
Candidates with an active Public Trust or Suitability determination are preferred.
Preferred:
Master’s degree may substitute for four years of experience.
Experience with DevSecOps and Cloud software deployments.
Education:
BA/BS in Computer Science, Information Systems, Business, or related field.
Additionally, US Citizenship or documented proof of eligibility to work in the US is a must. Upon receiving a conditional offer of employment, candidates will undergo a Government investigation and must meet eligibility requirements for Government clearance. Verification of past employment, education and references is also required. It is imperative that candidates be either a US citizen or a current green card holder with the last 3 consecutive years as a resident of the US.
The salary range for positions is $50,000 to $175,000. This range is provided as a general guideline and should not be interpreted as a guarantee of compensation. Actual salary offers will be determined based on a variety of factors, including but not limited to the specific responsibilities of the position, the candidate’s education, experience, location, knowledge, skills, and abilities. In addition, compensation may be influenced by applicable Federal Government contract labor categories and established contract wage rates.
At A3 Technology, Inc., we take pride in being an Equal Opportunity Employer (EEO) and Affirmative Action (AA) employer. We're committed to considering all qualified candidates for employment without regard to race, religion, color, sex, sexual orientation, gender identity, age, protected veteran status, disability, national origin, genetic information or any other protected status.