Principal/Sr Principal Engineer Sys - DevSecOps PKI Engineer (25-418)

The selected candidate will assist the C2BMC DevSecOps team in designing, developing, testing, implementing, and integrating PKI solutions focused on code signing and key management operations. The appropriate measure for this level position includes: applying extensive expertise; solving complex problems that require regular use of ingenuity and creativity; performing work without significant direction with results reviewed over a relatively long period; making decisions that could impact the achievement of primary organizational objectives; potentially taking on project leadership roles and representing the organization as the primary customer contact on key technical matters concerning contracts. Demonstrated ability to multitask, work independently, and take initiative. Excellent customer service and interpersonal skills, strong time management, and outstanding organizational, research, analytical, and problem-solving abilities to evaluate situations, make recommendations, and take effective action. Possesses knowledge and skills in technical problem resolution, with strong attention to detail, analytical skills, and excellent communication skills, both written and verbal.
Essential Functions:

Will establish and execute a certificate lifecycle management process

Should have extensive experience managing and maintaining PKI environments and Active Directory Certificate Services

Will collaborate with architecture, engineering, operations, and support teams to incorporate the PKI solution into the program in compliance with NIST 800-57 and CNS 1300 standards

Participate in efforts related to designing, planning, implementing, and maintaining digital code signing

Manage certificate enrollment, renewal, and revocation processes

Ensure the security and integrity of the PKI environment

Monitor and troubleshoot PKI and Active Directory Certificate Services-related issues

Collaborate with other Cyber, IT, and Operational teams to integrate PKI solutions with existing systems

Stay informed about industry trends and best practices in PKI and Active Directory Certificate Services

Support processes and implement capabilities to ensure application code integrity, secure SDLC activities, and manage key assets

Develop and maintain critical technical and cyber infrastructure and capabilities for certificate management

Implement security measures to prevent unauthorized access and ensure compliance with industry regulations and internal policies

Create PowerShell scripts for administrative and automation tasks

Support security engineering initiatives and the development and advancement of the Cyber Roadmap

Support continuous Security Engineering and architecture initiatives

Understanding of X.509 Certificate Management Standards, NIST 800-57, and CNS 1300 PKI Standards

Must be an effective communicator with strong written communication skills

Must be responsible for working independently or solo at times on large projects, and at other times collaborate with a team of DevSecOps engineers and other program development and deployment teams

5-7 years of experience supporting Microsoft Active Directory Certificate Services and PKI technologies

This position will be filled as either a Level 3 or Level 4.
Huntsville salary for Level 3: $105,400 - $158,000
Huntsville salary for Level 4: $131,100 - $196,700
Colorado Springs salary for Level 3: $100,300 - $150,500
Colorado Springs salary for Level 4: $124,900 - $187,300
Please list your current security clearance and IAT or relevant certifications on your resume, if applicable.
Basic Qualifications:
Level 3: A Bachelor's Degree in STEM Computer Science, Systems Engineering, Software Engineering, Engineering, Mathematics, Physics, or a related field from an accredited university is preferred, along with 5 years of experience; or a Master's degree (preferred) in a STEM related field with 3 years of relevant work experience; or a PhD in a related field with 1 year of relevant work experience
Level 4: A Bachelor's Degree in STEM Computer Science, Systems Engineering, Software Engineering, Engineering, Mathematics, Physics, or a related field from an accredited university is preferred, along with 8 years of experience; or a Master's degree (preferred) in a STEM related field with 6 years of relevant work experience; or a PhD in a related field with 4 years of relevant work experience

Applicants must hold a current, active in-scope DoD-issued Secret security clearance at the time of application, which is required to start

Applicants must have a current active DoD 8140 certification at IAT Level II or higher (such as Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA, etc.), which is required to start with the ability to obtain IAM Level III certification within the 8140 prescribed guidelines

Experience with:

Linux/Unix

Windows

Scripting languages (such as Bash, PowerShell, or Perl)

SQL

LDAP

Web services

Preferred Qualifications:

Master's Degree in Systems Engineering

Certification: INCOSE Certified Systems Engineering Professional (CSEP) Certification

Certification: Object Management Group Certified Systems Modeling Professional - Model Builder Fundamental (OCSMP - MBF)

What We Can Offer You:
Northrop Grumman offers a comprehensive benefits package and a work environment that promotes your development, supporting both employees and the company's success. The benefits provided by Northrop Grumman offer flexibility and control, allowing you to select options that best meet your needs and those of your family. Your benefits include the following:

Health Plan
Savings Plan
Paid Time Off
Education Assistance
Training and Development
Flexible Work Arrangements
https://benefits.northropgrumman.com/us/en2/BenefitsOverview/Pages/default.aspx
#NGSpace
#COSpace
#NGFeaturedJobs
#C2BMC
Additional Northrop Grumman Information:*
Primary Level Salary Range: $124,900.00 - $196,700.00Secondary Level Salary Range: $100,300.00 - $158,000.00The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.

Client-provided location(s): Huntsville, AL

Job ID: NorthropGrumman-R10207645-2

Employment Type: OTHER

Posted: 2025-09-13T20:04:33