Public Key Infrastructure (PKI) & Hardware Security Module (HSM) Engineer

Job overview

The Public Key Infrastructure (PKI) & Hardware Security Module (HSM) Engineer is a hybrid, full-time permanent role in Fairfax, VA, with three onsite days per week and two remote days. The stated salary range is $130,000–$180,000 per year. The engineer supports the NATO Post-Quantum Cryptography Pilot Project, helping modernize enterprise cryptographic capabilities. The role designs and operates enterprise PKI, integrates HSMs for secure key management, and implements hybrid classical and post-quantum certificates. It also supports controlled key ceremonies, security evidence, migration planning, and application integrations to build repeatable PKI modernization and crypto-agility capabilities.

What you'll do

• Design, deploy, and operate enterprise PKI
• administer and integrate HSMs
• implement hybrid X.509 certificates using classical and post-quantum cryptography
• plan and execute key ceremonies under dual-control and split-knowledge procedures
• support FIPS 140-3 module use and RMF/ATO evidence
• create certificate authority and certificate cutover plans
• troubleshoot TLS/mTLS, code signing, S/MIME, and application authentication
• document architecture, procedures, and configuration baselines.

What we're looking for

Skills & competencies

pki engineer

hsm engineer

nationwide it services

fairfax va

hybrid

three onsite days

two remote days

full-time permanent

$130k–$180k/year

post-quantum cryptography

hardware security modules

active secret clearance

security+

nato pilot project

Work arrangement

• Weekend coverage required

Benefits & perks

• Medical, dental, and vision insurance
• life and disability insurance
• 401(k) with employer match
• paid holidays and PTO
• commuter benefits
• employee assistance program
• educational reimbursement
• pet insurance.

Why this role

Active U.S. Secret clearance and U.S. person status required; Security+ certification required at minimum; vendor HSM certification or equivalent hands-on administration experience required; occasional travel may be required.

About the employer

Nationwide IT Services is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.