HSPD-12 Engineer

A3 Technology, Inc. is seeking an HSPD-12 Engineer to serve as a subject‑matter expert in credential management systems with a primary focus on HSPD-12 Technologies, including Intercede MyID and PKI. This role provides advanced engineering, troubleshooting, and cloud‑support services while collaborating with development, security, and infrastructure teams to design and maintain secure, scalable, automated solutions. 

Essential Job Functions:

• Provide engineering, operational, and lifecycle support for HSPD‑12 and PIV credentialing environments in alignment with FICAM, NIST, FISMA, and agency policy requirements.
• Engineer, maintain, and enhance credential management platforms including Intercede MyID, HID credentialing technologies, supporting middleware, smart card components, and Windows Server/database infrastructure.
• Manage core PIV/PKI infrastructure including Hardware Security Modules (HSMs), Certificate Authorities (CAs), Registration Authorities (RAs), certificate profiles, key management systems, and OCSP/CRL services.
• Oversee secure configuration, patching, firmware updates, backups, monitoring, and lifecycle management for HSMs and PKI systems supporting certificate issuance and PIV key generation.
• Support cloud‑hosted PIV/PKI services in AWS and Azure, including virtualized CAs, credentialing applications, and HSM‑integrated workloads.
• Use Terraform, Ansible, and automation frameworks to provision, configure, and maintain secure, compliant cloud and hybrid environments hosting PIV and certificate services.
• Implement policy‑as‑code, configuration baselines, and automated deployments to ensure consistent enforcement of HSPD‑12, NIST, and FICAM requirements.
• Automate deployment and maintenance of PIV credentialing applications, PKI services, middleware, and supporting components to ensure reliable and secure operations.
• Implement monitoring and alerting for critical PIV/PKI functions including certificate operations, HSM health, OCSP/CRL endpoints, issuance errors, and authentication performance.
• Troubleshoot complex issues across the credentialing ecosystem—including authentication devices, drivers, middleware, certificate chains, cryptographic services, and trust store configurations—across cloud and on‑prem environments.
• Support full credential lifecycle operations including issuance, activation, suspension, revocation, renewal, auditing, and compliance documentation.
• Maintain operational baselines, perform root cause analysis of recurring PIV/PKI issues, and implement durable remediation to strengthen system reliability.
• Ensure high availability, redundancy, and disaster recovery readiness across PIV and PKI infrastructure through resilient engineering and operational best practices.
• Apply and enforce security best practices across cloud, on‑prem, and credentialing systems to protect sensitive key material and maintain continuous compliance.
• Participate in audits, assessments, and accreditation activities to support continuous authorization for PIV and PKI systems.
• Work independently or as part of a cross‑functional team to support mission‑critical environments.

Required:

• Minimum of FIVE (5) years of relevant IT or engineering experience, including at least 1–2 years of cloud support experience.
• Hands-on experience working with credential management systems including Intercede MyID, HID solutions, PKI infrastructures, and certificate lifecycle management platforms.
• Proven experience troubleshooting drivers, middleware, credentialing software, and authentication technologies.
• Experience supporting and engineering Windows environments, as well as performing DBA responsibilities for Intercede or similar systems.
  
• Ability to obtain and maintain a Federal or DoD Public Trust clearance; candidates must receive adjudication prior to onboarding.
• Candidates with an active Public Trust or Suitability determination are preferred.

Preferred:

• Master’s degree may substitute for four years of experience.
• Experience with DevSecOps and Cloud software deployments.

Education:

• BA/BS in Computer Science, Information Systems, Business, or related field.

Additionally, US Citizenship or documented proof of eligibility to work in the US is a must. Upon receiving a conditional offer of employment, candidates will undergo a Government investigation and must meet eligibility requirements for Government clearance. Verification of past employment, education and references is also required. It is imperative that candidates be either a US citizen or a current green card holder with the last 3 consecutive years as a resident of the US.

The salary range for positions is $50,000 to $175,000. This range is provided as a general guideline and should not be interpreted as a guarantee of compensation. Actual salary offers will be determined based on a variety of factors, including but not limited to the specific responsibilities of the position, the candidate’s education, experience, location, knowledge, skills, and abilities. In addition, compensation may be influenced by applicable Federal Government contract labor categories and established contract wage rates.

At A3 Technology, Inc., we take pride in being an Equal Opportunity Employer (EEO) and Affirmative Action (AA) employer. We're committed to considering all qualified candidates for employment without regard to race, religion, color, sex, sexual orientation, gender identity, age, protected veteran status, disability, national origin, genetic information or any other protected status.