PKI & Hardware Security Module Engineer
About the job
- A bachelor's degree in computer science, Information Systems, Cybersecurity, or Electrical Engineering is required; equivalent demonstrated experience is accepted.
- At least five years of experience engineering or operating enterprise PKI in production, including CA deployment, hierarchy management, and lifecycle automation.
- Hands-on HSM administration experience, including key lifecycle, partitioning, multi-person authentication, and backup and restore.
- Experience executing key ceremonies with dual control and audit and witness requirements.
- Working knowledge of ML-KEM, ML-DSA, SLH-DSA, NIST FIPS 203/204/205, and CNSA 2.0 migration timelines.
- Experience with X.509, TLS/mTLS, CRL/OCSP, enterprise certificate integration, and Python and/or PowerShell.
- Active U.S. Secret security clearance and U.S. person status are required.
- CompTIA Security+ certification is required at minimum.
- At least one vendor HSM certification, such as Thales Luna or Entrust nShield, or documented equivalent hands-on HSM administration experience is required.
- Design, deploy, and operate enterprise PKI using Microsoft AD CS, EJBCA, or equivalent systems, including CA hierarchies, certificate lifecycles, CRL/OCSP, and CP/CPS policies.
- Integrate and administer HSMs such as Thales Luna or Entrust nShield, including partitioning, in-HSM key generation, backup and cloning, PED authentication, and firmware management.
- Implement hybrid X.509 certificates combining classical and post-quantum cryptography (ML-DSA/ML-KEM), and evaluate hybrid versus composite approaches.
- Plan and execute key ceremonies under dual-control and split-knowledge procedures, and maintain scripts, witness records, and audit evidence.
- Support FIPS 140-3 module use and prepare RMF/ATO security evidence.
- Create phased CA and certificate cutover plans, rollback criteria, and go/no-go evidence.
- Troubleshoot TLS/mTLS, code signing, S/MIME, and application authentication integrations.
- Document architecture, standard operating procedures, and configuration baselines for customer and NATO stakeholder review.
- CISSP or CISM certification is strongly preferred.
- Previous PQC pilot or hybrid-certificate implementation experience.
- NATO, federal, classified, or highly regulated environment experience.
- RMF/ATO documentation and FIPS 140-3 or Common Criteria exposure.
- PKI-specific AD CS or EJBCA training, or CCSP, GSEC, or GCIH certification.
- Advanced education or training in cryptography or applied mathematics.
- Top Secret/SCI clearance or NATO Secret eligibility.
About the company
What Nationwide IT Services does: It provides Information Technology solutions, program management support, and subject-matter expertise for the U.S. federal government, leveraging its 8(a) SBA designation and CVE-verified SDVOSB status. How its product works: It deploys mission-specific IT and management solutions that comply with regulatory requirements, reflect the client’s mission, vision and values, align objectives with deliverables, apply industry best practices, and create measurable, sustainable change. How it differs from competitors: It combines federal-focused IT and management consulting with 8(a) certification and SDVOSB status, emphasizing tailored, mission-aligned solutions that navigate regulatory environments and deliver measurable results for government clients. What the company’s goal is: To help federal agencies achieve their missions by delivering compliant, mission-aligned IT and management solutions that produce lasting change.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Chantilly, Virginia
Founded
2006
Get referred to Nationwide IT Services
See people who can refer or advise you
Simplify's Take
What believers are saying
- July 2026 Microsoft AI partnership messaging positions NIS for federal AI implementation.
- December 2025 SHIELD selection expands access to a $151 billion DoD vehicle.
- September 2025 CMMI Level 3 recognition supports larger agency bids and renewals.
What critics are saying
- Federal contracting is concentrated; one SHIELD or MAS setback would hit revenue fast.
- Glassdoor reviews mention distrust of the CEO and COO, risking retention and delivery.
- Small August 2026 USGS orders signal dependence on winning many low-dollar recompetes.
What makes Nationwide IT Services unique
- NIS won MDA SHIELD in December 2025, spanning missile-defense modernization work.
- NIS holds OASIS+ awards across four categories and 22 active federal prime contracts.
- NIS carries Microsoft Technology Partner, Drupal Bronze, and CMMI Level 3 credentials.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance
- 401(k) Retirement Plan
- 401(k) Company Match
- Paid Holidays
- Paid Vacation
- Paid Sick Leave
- Commuter Benefits
- Tuition Reimbursement