Lead Security and PKI Engineer

<div class="content-intro"><h3>About Us</h3> <div> <div>AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.</div> </div></div><p>AGE Solutions is seeking a <strong>Lead Security and PKI Engineer</strong> to provide technical leadership in DoD PKI/PKE engineering support, security architecture, and cryptographic algorithm implementation. This position requires deep knowledge of Public Key Infrastructure, certificate management, and DoD security standards.</p> <p><strong>Responsibilities Include: </strong></p> <ul> <li>Provide Tier III technical support for DoD PKI Portfolio infrastructure issues and PKE consultation</li> <li>Lead CA (Certificate Authority) architecture analysis, design, enhancement, and deployment across NIPR/SIPR networks</li> <li>Develop and execute plans for DoD migration to stronger cryptographic algorithms and Post-Quantum Computing (PQC) compliance</li> <li>Evaluate COTS products and hardware for PKI interoperability with DoD systems</li> <li>Provide direct consultation to end users, system administrators, developers, RA/LRA/KRA personnel, and help desk staff</li> <li>Develop and maintain PKI security compliance documentation (STIG checklists, RMF per NIST 800-37)</li> <li>Support Zero Trust (ZT) compliance and modernization of PKI capabilities</li> <li>Manage large volumes of technical support tickets and provide escalation resolution</li> </ul> <p><strong>Required Skills, Qualifications, and Experience: </strong></p> <ul> <li>Bachelor’s Degree in Computer Science, Cybersecurity, Information Security, or related field</li> <li>8+ years of hands-on PKI/cryptography engineering and DoD IT security experience</li> <li>Must have and maintain a current DoD Secret clearance</li> <li>Deep knowledge of X.509 certificates, certificate validation, trust models, and DoD PKI architecture</li> <li>CISSP, CISM, CEH, or equivalent information security certification <em>highly preferred</em></li> <li>Advanced understanding of cryptographic algorithms, NIST standards, and algorithm evolution</li> <li>Expert-level knowledge of Windows, Linux, Unix, and MacOS</li> <li>Knowledge of MS CAPI, MS CAPI NextGen, NSS, OpenSSL, and MOD NSS</li> <li>Experience evaluating and integrating commercial PKI solutions with government systems</li> <li>Must reside within a commutable d