Software Engineer, PKI System
Support and advance enterprise cybersecurity engineering for the National Airspace System (NAS), with a focus on Public Key Infrastructure (PKI) and certificate lifecycle management.You will apply hands-on Java development expertise to design, build, and maintain PKI systems and security tooling, including integration with certificate authority platforms such as EJBCA, supporting certificate issuance, validation, and lifecycle management across diverse operational environments.This role also involves working with relational databases (MariaDB with Galera clustering preferred), cloud platforms (AWS, including Secrets Manager; and Azure, with confidential computing experience a plus), and cryptography, including post-quantum cryptography (PQC). Experience working with government clients is preferred.Concepts Beyond provides Software Engineering, Systems Engineering, and Aviation expertise to develop advanced Air Traffic Management concepts; develops cybersecurity solutions in PKI, post-quantum computing, zero trust & confidential computing; Develops AI/ML and cloud computing tools for Aviation Safety & Data Analytics.Key ResponsibilitiesJava Application Development: Design, implement and test scalable full stack java applications. Develop automation integration with vendor RESTful APIs. Apply BouncyCastle, Hibernate/JPA, and Spring Boot. Integrate with secure key storage such as HSM, TPM and AWS Secrets Manager.Database & Backend Development: Design, query, and maintain relational and other database structures (MariaDB with Galera clustering preferred) supporting PKI operations, certificate metadata, audit logging, and application backend functionality, ensuring data integrity, performance, and reliable integration with front-end and certificate management components.GUI Development: Design and develop intuitive, user-friendly graphical user interfaces (GUIs) to support certificate management workflows and administrative tooling, translating complex PKI and system configuration processes into accessible, efficient user experiences for technical and non-technical stakeholders alike.PKI Protocol Implementation: Analyze PKI standards, including IETF RFCs, and implement solutions to securely integrate protocols into the certificate management architecture.PKI Systems & Certificate Lifecycle Management: Apply PKI expertise to the design, development, and maintenance of software systems supporting digital certificate issuance, validation, and lifecycle management, ensuring implementations align with security best practices, industry standards, and evolving certificate authority requirements across diverse operational environments.PKI Tooling & Automation (EJBCA): Configure diverse system environments and automate PKI tools and platforms such as EJBCA to support certificate authority operations, certificate profiles, end-entity management, and integration with dependent applications and services.Backlog & Integration Management: Review and prioritize high-priority integration actions from the development backlog, coordinating with cross-functional teams to plan and execute software integration efforts involving digital certificates, EJBCA, and related PKI tooling, and ensure timely resolution of integration issues in support of project schedules and operational requirements.Cloud & Cryptography Engineering: Build and secure solutions on AWS (including Secrets Manager) and Azure, applying cryptography and PKI best practices; experience with post-quantum cryptography (PQC) and Azure confidential computing is a plus.Industry Engagement & Outreach: Contribute to working groups and standards bodies, and represent the organization externally through publications, conference presentations, and panel participation.Strategic Insight & Opportunity Identification: Stay current on government and industry activities to identify emerging trends, gaps, and innovation opportunities. Contribute ideas that support growth and new business opportunities.RequirementsBachelor’s degree in Computer Science, Engineering, or a related field, plus 15+ years of relevant software engineering experience.Java software development experience.Experience applying PKI expertise to the design, development, and maintenance of software systems supporting digital certificate issuance, validation, and lifecycle management.Experience configuring and automating PKI tools and platforms such as EJBCA, including certificate profiles, end-entity management, and integration with dependent applications and services.Experience with relational and other database systems, designing and maintaining data structures supporting PKI operations, certificate metadata, audit logging, and backend functionality.Experience designing and developing Java-based GUIs for certificate management workflows and administrative tooling.Experience reviewing and prioritizing development backlog items and coordinating cross-functional integration efforts involving digital certificates, EJBCA, and related PKI tooling.AWS experience, including Secrets Manager.Azure experience.Cryptography and PKI experience.Preferred QualificationsDatabase experience with MariaDB, Galera clustering preferred.Post-quantum cryptography (PQC) experience.Azure confidential computing experience.Experience working with government clients.