{"id":2491984,"url":"https://alion.io/job/august-schell-pki-operations-engineer-august-schell","title":"PKI Operations Engineer - August Schell","company":{"id":1925577,"name":"August Schell","domain":"augustschell.com","url":"https://alion.io/company/augustschell","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Meade, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":95000,"max_usd":181000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":5037},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Dilithium","optional":false},{"name":"Docker","optional":false},{"name":"Grafana","optional":false},{"name":"ITSM","optional":false},{"name":"KVM","optional":false},{"name":"Kyber","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"PKI","optional":false},{"name":"Podman","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Red Hat","optional":false},{"name":"Scrum","optional":false}],"status":"live","first_seen_at":"2026-10-14T03:05:52Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-14T09:16:38Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"PKI Operations Engineer\nFt. Meade, MD - Full Time (Hybrid)\nAugust Schell is looking for a PKI Operations Engineer to sustain and operate DoD enterprise Public Key Infrastructure in support of our DISA customer. This is a Red Hat Certificate System (RHCS) solution. Where our PKI Software Engineer builds the next-generation certificate-systems code, this role keeps the infrastructure running: operating and hardening the live RHCS environment, standing up new customers and enclaves, driving CVE remediation and patch cycles, monitoring system health, and automating the operational toil that keeps a high-volume CA reliable. The engineer works hand-in-hand with commercial product engineering, government operations teams, and other program contractors - including through the environment's post-quantum cryptography (PQC) migration.\nIndividuals in this role must be able to work hybrid and go on site at Fort Meade as requested.\nResponsibilities Include\nOperate and sustain the production PKI environment on Red Hat Certificate System (RHCS) - CA availability, certificate lifecycle operations, and the day-to-day health of the issuance pipeline\n\nRun RA/CRL/OCSP operations and certificate lifecycle management, including the transition to shorter-lived certificates at higher issuance volume (ACME automation)\n\nOnboard new customers, enclaves, and use cases onto the PKI - configuration, integration, and secure hardening of new environments to program standards\n\nOwn CVE remediation and patch management for the PKI stack and its underlying RHEL hosts - track, test, schedule, and apply security patches with minimal disruption to CA operations\n\nMonitor system health and performance; build and maintain alerting, logging, and dashboards; respond to and resolve operational incidents, and lead root-cause analysis\n\nOperate and troubleshoot HSM integrations (Entrust nShield / Thales Luna) supporting CA operations and key escrow\n\nAutomate operational tasks - health checks, backups, certificate/CRL monitoring, deployment and configuration - using scripting and CI/CD tooling to reduce toil and manual error\n\nSupport the program's PQC migration from an operations standpoint (algorithm rollout, version transition, validation in the live environment)\n\nProvide development support in an operational capacity as additional value - small fixes, config-as-code, tooling, and reproduction of issues for the product engineering team - without owning the core feature-development backlog\n\nCommunicate clearly across government operations stakeholders, commercial vendor engineering, and program contractors; document runbooks and escalate risks and blockers before they impact operations\n\nRequirements\nActive Secret clearance minimum (Top Secret preferred and may be required)\n\nLocal to the DMV area with the ability to work on site at Fort Meade as requested\n\nFive (5)+ years of relevant systems/operations engineering experience (flexible for candidates with exceptional PKI depth)\n\nStrong Linux (RHEL) systems administration and operations background, including patch management and system hardening\n\nKnowledge or experience with Linux containers and container orchestration (Podman / Docker) and VMs (KVM)\n\nHands-on experience operating PKI, x.509, cryptography, and system/software security technologies\n\nDirect experience operating Red Hat Certificate System (RHCS) - this is a Red Hat solution. Dogtag PKI experience (RHCS's upstream open-source project) is an accepted alternative skillset, as is comparable enterprise CA platform operations (EJBCA, Microsoft AD CS, Entrust Authority, ISC CertAgent, or similar)\n\nScripting/automation proficiency (Python, Bash, or similar) for operational tooling\n\nDoD 8570/8140 IAT Level II certification (Security+ or equivalent)\n\nStrong written and verbal communication skills, with a habit of documenting runbooks and operational procedures\n\nStand Out With\nPrior DISA or DoD PKI program operations experience (Purebred, derived credentials, RA/CRL/OCSP operations at scale)\n\nHSM operations experience (Entrust nShield, Thales Luna) - the customer runs Entrust HSMs\n\nACME protocol and certificate automation at scale\n\nPost-quantum cryptography familiarity (ML-DSA/Dilithium, Kyber, CNSA 2.0 timelines) from a migration/operations lens\n\nConfiguration management and infrastructure-as-code (Ansible, or similar)\n\nDirectory Server / LDAP operations experience\n\nMonitoring/observability tooling (Prometheus/Grafana, ELK, or similar) and incident response\n\nAgile / ITSM operating rhythms (Scrum, JIRA, change management)","description_format":"text","description_chars":4558,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Government","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-14T03:05:52Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":38,"reasons":["conf:3","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/august-schell-pki-operations-engineer-august-schell","json_url":"https://alion.io/job/august-schell-pki-operations-engineer-august-schell.json","meta":{"generated_at":"2026-10-14T12:25:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15104,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1925577},"rest":"https://alion.io/mcp/rest/get_company?id=1925577"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faugust-schell-pki-operations-engineer-august-schell"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faugust-schell-pki-operations-engineer-august-schell"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faugust-schell-pki-operations-engineer-august-schell"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/august-schell-pki-operations-engineer-august-schell\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faugust-schell-pki-operations-engineer-august-schell"}]}