Support USCIS PKI management and modernization including certificate lifecycle (issuance, rekey, revocation), CA operations (DHS CA4/NPE), PIV-based authentication, automation of certificate workflows, design and implementation of PKI/cloud solutions, documentation, and recommendations for cloud security and performance.
Who we are:
Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.
Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.
When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers.
The PKI Engineer will support clients PKI management and modernization, including device certificate lifecycle management, NPE certificate authority support, person-centric PKI, PIV-based certificate authentication, and automation of certificate request and approval processes.
This is a specialized role.
Key Responsibilities
• Support Federal PKI and DHS PKI policy-aligned implementation.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.
• Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance.
• Support device certificate request processing through digital workflows.
• Support DHS CA4 and external CA processes according to agency guidelines.
• Support Non-Person Entity certificate authority for workstations and mobile/Apple devices.
• Support person-centric PKI certificate authority and certificate lifecycle management systems.
• Automate certificate management processes to reduce manual error and approval delays.
• Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications.
• Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools.
• Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation.
• Provide recommendations for optimizing cloud resource performance and security.
Required Qualifications
• Experience with PKI and certificate lifecycle management.
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required access.
• U.S. permanent resident status is required for employment and obtaining mandated security clearance
• Understanding of Federal PKI and/or DHS PKI policy.
• Experience supporting certificate issuance, rekey, modification, revocation, and reissuance.
• Experience with certificate authorities and certificate management systems.
• Ability to support PIV-based certificate authentication and authorization.
• Ability to obtain favorable EOD / suitability and maintain required access.
• U.S. permanent resident status is required for employment and obtaining mandated security clearance
Preferred Qualifications
• Experience with DHS CA4, NPE CA, person-centric PKI, DHS 4300A, PKI interface specifications, or COPG.
• Experience with HSMs, HashiCorp, Certbot, Let’s Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
• Prior DHS or federal civilian PKI experience.
• Experience automating manual certificate workflows.
• Experience supporting Apple/mobile device certificates.
• Experience with HSMs, HashiCorp, Certbot, Let’s Encrypt, OAuth/OIDC, AWS EKS, serverless/Lambda, OCP, AWS, Azure, or GCP.
• Prior DHS or federal civilian PKI experience.
• Experience automating manual certificate workflows.
• Experience supporting Apple/mobile device certificates.
Benefits:
At Makpar Corporation we understand that we all need to balance work and life – that is why we have a great benefits package, excellent training and career development opportunities, flexible work schedules along with a generous compensation package. At Makpar, we believe in keeping our employees happy, healthy and engaged. We pride ourselves in providing outstanding benefits, creating environments where employees are encouraged to be themselves, collaborate, and be inquisitive in order to achieve goals.
Start your career today and be a part of something meaningful!
Makpar is an Equal Opportunity Employer.
Similar Jobs
.png)
Healthtech • Social Impact • Telehealth
Serve as the first contact for older adults and caregivers, guiding them through intake, matching patients with therapists, coordinating care, documenting interactions in EHR/CRM, and providing empathetic emotional support while managing multiple cases.
Top Skills:
Google WorkspaceHealthieHubspot
Cloud • Fintech • Food • Information Technology • Software • Hospitality
Serve as the first step in the sales pipeline by executing high-volume outbound/inbound outreach, qualifying prospects, scheduling meetings for Account Executives, and developing toward a full-cycle AE role. Maintain daily activity metrics (100+ outreach actions), host qualification calls, and hand off qualified opportunities while applying feedback and improving performance.
Artificial Intelligence • Marketing Tech • Software • Generative AI • Automation
Own and modernize the governance domain (auth, roles/permissions, orgs, billing) as a Staff-level backend IC: set architecture, refactor for scale and AI-native workflows, write critical-path code (70-80%), mentor engineers, and partner with product to deliver enterprise-grade governance and compliance features.
Top Skills:
AgentsAudit LogsBilling SystemsContext WindowsIso 27001LlmsRagSAMLScimSoc2SsoTokensUsage-Based Pricing
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
