The Role
Support USCIS PKI management and modernization including certificate lifecycle (issuance, rekey, revocation), CA operations (DHS CA4/NPE), PIV-based authentication, automation of certificate workflows, design and implementation of PKI/cloud solutions, documentation, and recommendations for cloud security and performance.
Summary Generated by Built In
Who we are:
Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.
Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.
When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers.
The PKI Engineer will support clients PKI management and modernization, including device certificate lifecycle management, NPE certificate authority support, person-centric PKI, PIV-based certificate authentication, and automation of certificate request and approval processes.
This is a specialized role.
Key Responsibilities
• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.
Required Qualifications
• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required access.
• U.S. permanent resident status is required for employment and obtaining mandated security clearance
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required access.
• U.S. permanent resident status is required for employment and obtaining mandated security clearance
Preferred Qualifications
• Experience with DHS CA4, NPE CA, person-centric PKI, DHS 4300A, PKI interface specifications, or COPG.
• Experience with HSMs, HashiCorp, Certbot, Let’s Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
• Prior DHS or federal civilian PKI experience.
• Experience automating manual certificate workflows.
• Experience supporting Apple/mobile device certificates.
• Experience with HSMs, HashiCorp, Certbot, Let’s Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
• Prior DHS or federal civilian PKI experience.
• Experience automating manual certificate workflows.
• Experience supporting Apple/mobile device certificates.
Benefits:
At Makpar Corporation we understand that we all need to balance work and life – that is why we have a great benefits package, excellent training and career development opportunities, flexible work schedules along with a generous compensation package. At Makpar, we believe in keeping our employees happy, healthy and engaged. We pride ourselves in providing outstanding benefits, creating environments where employees are encouraged to be themselves, collaborate, and be inquisitive in order to achieve goals.
Start your career today and be a part of something meaningful!
Makpar is an Equal Opportunity Employer.
Skills Required
- Experience with PKI and certificate lifecycle management (issuance, rekey, modification, revocation, reissuance).
- Understanding of Federal PKI and/or DHS PKI policy.
- Experience with certificate authorities and certificate management systems.
- Ability to support PIV-based certificate authentication and authorization.
- Ability to obtain favorable EOD / suitability and maintain required USCIS access.
- U.S. citizenship likely required for DHS IT access (confirm before final posting).
- Experience with DHS CA4, NPE CA, person-centric PKI, DHS 4300A, PKI interface specifications, or COPG.
- Experience with HSMs, HashiCorp, Certbot, Let's Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
- Prior DHS, USCIS, or federal civilian PKI experience.
- Experience automating manual certificate workflows.
- Experience supporting Apple/mobile device certificates.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Makpar provides high level strategic and project management services based on over 10 years of experience in customer focused, cutting edge technology in product development, big data and analytics. With a principal office in Loudon County, Virginia, we have access to the best and the brightest people in the industry who have a passion for helping our clients. Our highly experienced consultants will work on your most pressing challenges day in and day out and will deliver results that will delight you. We value integrity, honesty, and open communications in all our dealings. We continually strive to improve ourselves through soliciting feedback and evaluating our results against the best in the industry.
