E

ENS Solutions

Builds secure IT systems for government clients

PKI Engineer

Full-TimeUpdated on 10/23/2026
No salary listed
Senior
United States
In PersonOn-site in the United States.
CybersecuritySecurity Engineering & Architecture
No H1B Sponsorship
US Top Secret Clearance Required

About the job

Requirements
  • At least 5 years of experience in PKI engineering, infrastructure security, or systems administration.
  • A 8570/8140 certification.
  • Strong Linux system administration experience.
  • Hands-on experience with Public Key Infrastructure (PKI), Certificate Authority design and operations, Lightweight Directory Access Protocol (LDAP) administration and integrations, Ansible automation, and Bash scripting.
  • Experience with certificate lifecycle management and automation.
  • Knowledge of certificate policies, certificate profiles, and certificate contents and extensions.
  • Strong understanding of asymmetric cryptography concepts, Transport Layer Security/Secure Sockets Layer (TLS/SSL) certificates and trust models, and Linux security principles and system hardening.
  • Experience troubleshooting certificate and authentication-related issues in enterprise environments.
  • Strong written and verbal communication skills.
Responsibilities
  • Design, implement, configure, and maintain enterprise PKI environments.
  • Administer and support Linux-based systems hosting PKI services and related infrastructure.
  • Manage certificate lifecycle operations, including issuance, renewal, revocation, validation, and expiration monitoring.
  • Develop and maintain automation for certificate deployment and lifecycle management using Ansible and Bash scripting.
  • Configure and manage LDAP integrations and directory services related to PKI environments.
  • Define and maintain policies, standards, and operational procedures.
  • Troubleshoot PKI-related issues involving certificates, trust chains, TLS/SSL configurations, and cryptographic services.
  • Collaborate with security and infrastructure teams to ensure compliance with enterprise security standards and best practices.
  • Implement monitoring, auditing, backup, and disaster recovery procedures for PKI systems.
  • Support asymmetric cryptography implementations and secure communications across enterprise platforms.
  • Create and maintain technical documentation, architecture diagrams, and operational playbooks.
Desired Qualifications
  • Experience working with Hardware Security Modules (HSMs).
  • Familiarity with Automated Certificate Management Environment (ACME) protocol and automated certificate enrollment solutions.
  • Knowledge of compliance frameworks and security standards related to cryptography and certificate management.
  • Experience with DevOps or Infrastructure-as-Code practices.
  • Experience with Amazon Web Services (AWS).
  • Familiarity with enterprise identity and access management solutions.

About the company

ENS Solutions builds and manages secure technology for defense, intelligence and commercial clients. Its identity and access work covers the systems that verify users, control permissions and protect sensitive accounts, alongside custom application development and systems integration. Teams also turn geographic data and imagery into maps and visual intelligence products used to explain places and events. The business works through consulting and technical service engagements, combining project planning with ongoing support for client systems from initial design through day-to-day operation. Founded in 2014, the company is headquartered in Mitchellville, Maryland.

Company Size

11-50

Company Stage

N/A

Total Funding

N/A

Headquarters

Mitchellville, MD

Founded

2014

Get referred to ENS Solutions

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Insurance premiums are covered: ENS lists fully paid health, dental and vision premiums in its benefits package.
  • Retirement contributions start immediately: ENS advertises a day-one 401k contribution in its business-development posting.
  • Time off includes federal holidays: ENS lists paid leave plus all 11 federal holidays.

What critics are saying

  • Clearance gates entry: ENS's Cloud Engineer opening requires active Top Secret clearance, compartmented access and a counterintelligence polygraph.
  • Remote work is restricted: ENS lists its Reston Cloud Engineer opening as nontelecommuting.
  • Interviews restrict assistance: ENS prohibits AI and other assistive tools unless candidates obtain advance permission.

What makes ENS Solutions unique

  • Classified work has an organizational foundation: ENS maintains a Top Secret facility clearance.
  • Formal controls shape delivery: ENS reports certifications covering quality, IT service management and information security.
  • Leadership supports client delivery: ENS markets direct executive reach-back for staff supporting customer missions.

Help us improve and share your feedback! Did you find this helpful?