PKI Engineer

The selected candidate will support the DevSecOps team to design, develop, test, implement, and integrate PKI solutions to focus on code signing and key management operations. The PKI engineer will design and implement a certificate lifecycle management process. The selected candidate will have extensive experience in managing and maintaining PKI environments and Active Directory Certificate Services. You will work with the architecture, engineering, operations, and support teams to integration the PKI solution into the program in accordance with NIST 800-57 and CNS 1300 standards. 

Other 

• The appropriate measure for this level position includes: applies extensive expertise; solves complex problems that require the regular use of ingenuity and creativity; work is performed without appreciable direction and is reviewed for desired results from a relatively long time perspective; erroneous decisions would normally result in failure to achieve major organizational objectives; may function in project leadership roles and represents the organization as prime customer contact on significant technical matters on contracts. 

• Demonstrated ability to multi-task, to be self-initiated, and work independently. 

• Excellent customer service and interpersonal skills, excellent time management skills 

• Excellent organizational, research, analytical and/or problem-solving skills to evaluate situations, make recommendations, and take effective action. 

• Knowledge and skill in technical problem resolution 

• Strong attention to detail and outstanding analytical skills, strong written and verbal communication skills 

Experience Required 

• Must be an effective communicator with excellent writing.  Must be responsible to work independently / solo at times on large projects, at other times will be in a collaborative team environment with other DevSecOps engineers, as well as other program development and deployment teams. 

• 5-7 years’ experience supporting Microsoft Active Directory Certificate Services and PKI technologies.  

Technical Skills Required 

• Participate in efforts related to designing, planning, implementing, and maintaining digital code signing. 

• Manage certificate enrollment, renewal, and revocation processes. 

• Ensure the security and integrity of the PKI environment. 

• Monitor and troubleshoot PKI and Active Directory Certificate Services related issues. 

• Collaborate with other Cyber, IT and Operational teams to integrate PKI solutions with existing systems. 

• Stay updated with industry trends and best practices in PKI and Active Directory Certificate Services. 

• Support processes and implement capabilities to support application code integrity, secure SDLC activities, and key management. 

• Develop and maintain critical technical and cyber infrastructure and capabilities for certificate management. 

• Implement security measures to protect against unauthorized access and ensure compliance with industry regulations and internal policies. 

• Experience with Linux/Unix, Windows, scripting (with programming languages such as Bash, PowerShell, or Perl), SQL, LDAP, and web services. 

• Develop PowerShell scripts for administrative and automation tasks. 

• Support Security Engineering efforts and Cyber Roadmap development and maturation. 

• Support ongoing Security Engineering and architecture efforts. 

• Understanding of X.509 Certificate Management Standards 

• Understanding of NIST 800-57 and CNS 1300 PKI Standards 

Education Required 

• Emerging authority typically with an advanced degree and 7+ years' experience or bachelors with 9+ years' experience or equivalent. Appropriate IAM Level III DoDI 8570 certification required. Internal candidates with IAT Level II cert and the ability to obtain IAM Level III cert within the 8570 prescribed guidelines will be considered as well. 

• DoD IAT Level II required 

• Secret Clearance Required 

$115,000 - $125,000 a year