pki jobs in San Diego

Design and build secure cryptographic services—including key management, PKI, and secrets distribution—for a large-scale multi-tenant SaaS platform. Apply ML/AI techniques to detect cryptographic misuse and anomalies in near real time.…See more Operate services on Kubernetes, manage CI/CD pipelines, and respond to security incidents. Requires 4+ years of production software engineering experience, advanced knowledge of distributed systems and cryptographic primitives, and demonstrated security-conscious coding practices.

Design and build secure cryptographic services (key management, PKI, secrets distribution) for ServiceNow's multi-tenant SaaS platform, ensuring FIPS compliance and regulated-environment requirements. Apply ML/statistical techniques to detect cryptographic misuse, anomalies in key usage, and suspicious access patterns in near real-time.…See more Operate services on Kubernetes, manage CI/CD pipelines, handle on-call duties, and collaborate with security architects to translate compliance requirements into production code. Requires 4+ years of production software engineering (Java, Go, or equivalent OO language), deep knowledge of distributed systems and cryptographic primitives, and hands-on Kubernetes deployment experience.

Senior Cyber Systems Engineer responsible for developing and maintaining RMF artifacts (SSPs, SARs, SAPs, POA&Ms), coordinating with Navy Authorizing Officials and Security Control Assessors, and managing cybersecurity authorization packages for ATO/IATT/IATO activities. The role involves vulnerability remediation, STIG compliance, access control policy development, patch management, and server/network infrastructure oversight.…See more Requires mastery of the Risk Management Framework, CI/CD security pipelines, container hardening (Docker/Kubernetes), infrastructure-as-code tools (Terraform, Ansible), and automated security assessment tools (ACAS/Nessus). Serves as Information Systems Security Manager (ISSM) for product ATOs and coordinates with government agencies to ensure DoD and Navy cyber security requirements are met.

AMD seeks a security engineer to implement, validate, and secure AI platform features on internal test hardware and customer systems. The role spans hardware, firmware, and software security—including secure boot, attestation, key/certificate management, vulnerability analysis, and fix development and verification.…See more You will conduct security assessments, develop tooling and automation for testing and remediation, and partner across architecture, firmware, and software teams. The position requires proficiency in C/C++ and scripting languages, deep platform security knowledge (cryptography, memory safety, isolation, trusted execution environments), and experience with AI/ML infrastructure security.

Senior Principal Cybersecurity Engineer supporting DoD Navy communication systems, responsible for planning and executing penetration tests, performing network traffic analysis, architecting hardened IT systems in classified environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards. Requires 14+ years of experience (or 12+ with master's degree), with 5–7 years in hands-on cybersecurity engineering and 5+ years designing/implementing hardened systems in classified settings.…See more Must hold an active Top Secret clearance and be able to obtain TS/SCI.

Senior or Staff Cloud Infrastructure Engineer responsible for designing and operating Crucible, a manufacturing-network software platform running across commercial cloud, government cloud, and on-premises environments. You will own infrastructure-as-code (Terraform, Helm, GitOps), Kubernetes production operations, cloud networking, identity and security controls, CI/CD pipelines, and observability tooling.…See more You'll work directly with software engineers to improve developer velocity, ensure production reliability, and support complex multi-environment deployments including GovCloud and air-gapped systems.

Staff-level hands-on security engineer responsible for designing and implementing platform security across Crucible, cloud infrastructure, and edge deployments. You will write code, harden Kubernetes and Linux systems, build identity and access controls, secure the software supply chain, and automate security into CI/CD workflows.…See more The role requires 8+ years of security engineering experience, strong software engineering skills, deep cloud and container security expertise, and the ability to support accreditation processes like ATO.

This role focuses on Public Key Infrastructure (PKI) engineering within a cybersecurity context. The engineer will work with cloud security across AWS, Azure, and GCP, develop security automation and orchestration solutions, and apply DevOps and Agile practices.…See more Required or strongly preferred qualifications include scripting proficiency (Bash, Python, PowerShell) and CSWF DOD 8750 IAM Level III certifications such as CISSP, CASP, or Security+.

A Software Integration Engineer at SAIC will design, develop, and deploy a hybrid container/virtualization platform supporting enterprise-scale workloads across on-prem and cloud environments. The role encompasses infrastructure-as-code automation, Kubernetes cluster configuration, DevSecOps practices, and integration of core platform services (identity/SSO, PKI, DNS, logging/SIEM, monitoring, secrets management).…See more Responsibilities include automating verification/validation, establishing CI/CD pipelines and standard operating procedures, supporting GPU-enabled AI/ML workloads, and mentoring junior engineers on cloud-native best practices. The position requires 7–9+ years of experience with cloud platforms (AWS, Azure, GCP), containerization (Kubernetes, Docker), virtualization (VMware, Hyper-V, KVM), infrastructure-as-code tools (Terraform, Ansible, Puppet), and DevSecOps toolchains (ArgoCD, GitLab, Jenkins).

VP-level Cloud Delivery Architect responsible for designing reliable, scalable, and secure AWS infrastructure solutions for LPL Financial. The role requires deep expertise in AWS services (Lambda, Glue, RDS, Step Functions, EC2, S3, ECS, EKS, etc.), infrastructure-as-code (Terraform), and cloud security/IAM to lead architecture design, perform systems analysis, and provide technical guidance to cross-functional teams.…See more Must balance fast-paced startup-like execution with formal change control, develop reference architectures, and mentor on best practices across on-premises and cloud environments.

Develop firmware for secure enclaves of custom ASICs in Blue Origin's TeraWave satellite communications network. Responsibilities include writing ROM code, bootloaders, and runtime firmware supporting secure boot, attestation, OTA updates, and lifecycle management.…See more Work closely with hardware and systems engineers on pre- and post-silicon validation, debugging, and bring-up of custom silicon. Requires 5+ years of firmware development in C with strong embedded systems and hardware/software integration experience.

Lead a team of IT systems engineers architecting, deploying, and securing enterprise server infrastructure across Windows, Linux, virtualization, and cloud environments. Design and operate Active Directory and hybrid identity solutions at scale, manage enterprise endpoint management with SCCM, and guide virtualization and hyperconverged infrastructure modernization.…See more Serve as primary technical authority providing hands-on mentoring, engineering reviews, and on-site technical advising to government clients on system architecture, modernization strategy, and mission-critical implementation planning.

SAIC seeks a Principal Cybersecurity Engineer to perform penetration testing, vulnerability assessments, and security architecture work on classified Navy communication systems. The role requires hands-on expertise in network traffic analysis (Wireshark), hardened IT systems design, DoD/IC security frameworks (NIST RMF, DISA STIG), and offensive security techniques against DoD/IC infrastructure.…See more Candidates must have 9+ years total experience (5–7 years in cybersecurity engineering, 5+ in classified/high-security environments), proven red-team capabilities, and an active Top Secret clearance with ability to obtain TS/SCI.

Senior Staff Software Engineer owning the secure manufacturing pipeline for humanoid robots—from bare-board provisioning through cryptographic enrollment and OTA readiness. You'll design secure manufacturing stations (HSM, key injection, AWS Private CA), build provisioning automation toolchains, manage End-Of-Line test frameworks, and bridge firmware/secure-boot teams with the cloud control plane.…See more Requires 10+ years in manufacturing engineering with deep test-tool development, 3+ years at Staff level, and proven expertise in PKI, device identity, AWS infrastructure, secure boot chains, and embedded Linux systems.

Software engineer supporting mission-critical DoD systems in secure, containerized environments. Responsibilities include Linux (Red Hat) system administration, container orchestration (Docker, Kubernetes, OpenShift), AWS infrastructure management, PKI administration, and infrastructure automation using Ansible and scripting.…See more The role requires 8+ years in DoD systems engineering, active TS/SCI clearance, DoD 8570 IAT Level II certification, and willingness to travel for shipboard deployments (~10% annually). May lead small teams and mentor junior engineers.

The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include analyzing cybersecurity directives and policies (CTOs, FRAGOs, IAVMs, STIG requirements), developing compliance strategies aligned with federal and defense security standards, and performing risk analysis and independent verification of security configurations.…See more The role requires in-depth Risk Management Framework knowledge, FISMA data reporting support, and use of compliance tracking tools such as VRAM. This position requires a Secret clearance, IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), and 10+ years of cybersecurity or incident response experience.

This role involves implementing, validating, and securing AI platform security features across AMD's hardware, firmware, and software stack. You will conduct security assessments, develop and verify security fixes, manage cryptographic keys and device identities, and provision secure boot and attestation mechanisms.…See more The position requires hands-on experience securing systems across hardware-firmware-software integration, proficiency in C/C++ and scripting, and familiarity with GPU/accelerator platforms, confidential computing, and trusted execution environments. You will partner with architecture, firmware, and software teams to resolve security issues and apply AI-assisted tooling to accelerate remediation and testing.

Software Integration Engineer responsible for designing, developing, and deploying a hybrid container/virtualization platform-as-code solution supporting enterprise-scale workloads across on-prem and cloud environments. The role involves integrating core platform services (identity, PKI, DNS, logging, monitoring, secrets management), configuring container runtimes and networking, and developing infrastructure-as-code automation.…See more Requires 9+ years of experience (or equivalent with advanced degree) with cloud platforms, Kubernetes, virtualization, DevSecOps practices, CI/CD tooling, and automation frameworks, plus the ability to mentor junior engineers and collaborate across security, platform, and application teams on compliance, incident response, and AI/ML workload enablement.

Senior Principal System Administrator responsible for managing and maintaining a classified development and integration test environment, including Windows and Red Hat Enterprise Linux servers, VMware virtualization infrastructure, and network hardware. The role requires strong Linux and Windows Server administration expertise, cybersecurity compliance knowledge (DISA STIGs, Nessus, PKI), and experience supporting classified networks.…See more Responsibilities include patching workflows, ePO/McAfee integration, vulnerability scanning, system accreditation support, and maintaining DoD-mandated security posture; some after-hours support for maintenance and incident response required.

The Cryptographic Test Engineer & Network Engineer will perform configuration, functional, and performance testing of cryptographic devices in military network systems, determine operational suitability, and develop test reports. The role requires hands-on experience with networking fundamentals (routing, Cisco IOS, VPNs), Linux/CentOS administration, cryptographic device management, PKI/key management systems, VPN tunneling, SSH, and security monitoring tools like Snort.…See more This is a 100% onsite, full-time position in San Diego supporting Navy operations.

This is a senior infrastructure and cybersecurity engineering role requiring 10+ years of experience designing, administering, and securing hybrid/cloud infrastructure across Linux, Windows Server, containerized, and private cloud environments. The engineer will implement security controls aligned with NIST SP 800-53, DISA STIGs, RMF, and Zero Trust principles, support DevSecOps pipelines and CI/CD automation, and use scripting, configuration management, and Infrastructure as Code to streamline builds, patching, hardening, and compliance.…See more The role demands collaboration across cybersecurity, software, infrastructure, and mission teams to troubleshoot complex issues, improve security practices, and communicate technical risks and recommendations.

Design, develop, and deploy a hybrid container/virtualization platform serving enterprise workloads across on-prem and cloud environments. Integrate core platform services (identity, PKI, DNS, logging, monitoring, secrets management) and support GPU-enabled AI/ML workloads.…See more Establish CI/CD pipelines, Infrastructure-as-Code automation, and standard operating procedures for configuration management, verification, and patch management. Lead cross-functional teams on containerization, DevSecOps, incident response, and ATO compliance efforts.

Design, develop, and deploy a hybrid container/virtualization platform supporting enterprise-scale workloads across on-prem and cloud environments. Own infrastructure automation, CI/CD integration, monitoring, security compliance, and platform service integration (identity, PKI, logging, secrets management).…See more Collaborate with cross-functional teams on incident response, vulnerability remediation, and mentorship of junior engineers in cloud-native and containerization best practices.

This role supports cybersecurity engineering and infrastructure security for enterprise, cloud, and classified environments. The engineer will manage vulnerability assessment, system hardening, patching, secure configuration, and DevSecOps pipeline integration across Linux and Windows Server platforms.…See more Responsibilities include compliance support (RMF, ATO, NIST SP 800-53, DISA STIGs), CI/CD security automation, containerized environment hardening, and infrastructure-as-code implementation. Strong technical depth in cloud platforms (AWS/AWS GovCloud), container orchestration, security tooling, and the ability to communicate complex technical and compliance issues to engineering and mission stakeholders are required.

Lead enterprise IT systems engineering for Navy infrastructure modernization, architecting and securing Windows, Linux, and cloud server platforms across Active Directory, hybrid identity, virtualization, and Azure environments. Direct a team of IT systems engineers in deploying, optimizing, and troubleshooting mission-critical infrastructure while serving as on-site technical advisor to government clients on system architecture and modernization strategy.…See more Require 10+ years enterprise Windows Server experience, 3+ years technical leadership, expertise in AD/Entra hybrid identity, enterprise endpoint management (MCM/SCCM), and hyperconverged infrastructure, plus hands-on knowledge of PowerShell automation, Azure, and security hardening.