PKI & Identity Infrastructure Engineer (FAA Enterprise Services)
CONCEPT SOLUTIONS LLC · Washington, DC
$80,000–$100,000from the description
Jul 22, 2026
Washington, DC
Jul 23, 2026
What this job asks for AI summary
A senior-level engineering role focused on managing and operating enterprise Public Key Infrastructure for a large federal aviation environment. Day-to-day work spans certificate lifecycle management, HSM administration, CA/RA/VA operations, and directory and identity services across both Linux and Windows platforms. Suited to experienced systems engineers with deep PKI and cryptographic operations backgrounds, ideally with prior exposure to federal IT compliance requirements.
Senior level · 5+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $128,188 (middle half $100,819–$156,589). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
The role sits at the intersection of PKI/cryptographic operations and systems administration, making it a genuine toss-up between 15-1244 (Network and Computer Systems Administrators) and 15-1212 (Information Security Analysts). The primary day-to-day work — administering CAs, HSMs, RHEL/Windows servers, databases, and web/app infrastructure — leans toward operating and maintaining systems (15-1244), though the security-mission framing and cryptographic authority could support 15-1212.
The clearance requirement is described as 'FAA Personnel Suitability Clearance,' which is a federal suitability/background investigation, not a DoD security clearance (Confidential/Secret/TS). It has been mapped to 'None' in the clearance field accordingly.
The degree requirement states a Bachelor's in a specific set of fields, but explicitly allows '4 years of relevant experience in lieu of a BS degree,' so no hard degree gate applies.
Thales and Luna are both named as HSM platforms in the requirements section; Thales is listed as the primary skill with Luna as an alternative since they are interchangeable HSM vendors in this context.
WSUS and Tanium appear in the role's narrative description (patching baselines) rather than in the formal Requirements section, so they are marked as preferred.
Federal cybersecurity/compliance familiarity and FAA enterprise environment experience are explicitly called 'highly preferred' in the Requirements section — they are not captured as named technology skills but noted here as strong differentiators.
The posted schedule (Mon–Fri, 9 AM–3 PM local) is a partial-day on-site schedule, which is unusual; the role is on-site in Washington, DC and is not remote.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.