Lead PKI Network Engineer

Leidos•Quantico, VA

14h•$73,450 - $132,775•Onsite

About The Position

Leidos' Digital Modernization sector is seeking a Lead PKI Network Engineer to support the Marine Corps Cyber Operations Group (MCCOG) Public Key Infrastructure (PKI) contract. This role provides technical expertise for concept exploration, requirements development, implementation, and enhancement of DoD PKI and USMC capabilities, and will work out of Quantico in VA (100% onsite). We expect the position to become available in May 2026. Primary Responsibilities: PKI Network Operations- Serve as the Network SPOC, providing technical oversight and guidance to PKI Network Operations staff. Maintain resilient certificate issuance and revocation infrastructure across MCEN networks. Ensure Marine Corps PKI requirements are integrated into future DoD PKI architecture. Support assessments of USMC impacts from DoD PKI PMO activities, including mobile device PKI and non-person entity issuance. Troubleshoot and resolve PKI-related issues (certificates, tokens, infrastructure services). Perform user account management, PKI system backups, and disaster recovery tasks. Support SIPRNET Token Management System (TMS) and lead systems administration for DoN PKI. Training and Outreach- Develop and deliver PKI Tactical Training Plans and materials for garrison and tactical networks. Configure and maintain PKI Tactical training suites using hypervisor technology. Provide training courses for deploying Marines, including PKI 101, CVI, Cryptographic Logon, PKI Administration, and Troubleshooting. Hardware Security Module (HSM) Support- Develop and maintain HSM-related training plans and materials. Configure and operate HSM training suites and deliver courses for deploying Marines. Certificate Authority (CA) Support- Provide technical support for Microsoft Active Directory, DoD PKI, and other CA technologies. Deploy and configure new Certificate Authorities per DoD security standards. Monitor CA health, publish Certificate Revocation Lists, and perform Tier III troubleshooting. Develop and maintain CA disaster recovery and COOP plans. Certificate Validation Infrastructure (CVI) Support- Support CVI technologies, including OCSP, Desktop Validator, and Enterprise Validation Authority. Deploy and maintain CVI software and configurations across USMC networks. Monitor CVI health and perform Tier III troubleshooting. Further support as necessary in the following areas: Tier III PKI issues, public key enabling, configuration management, PKI system infrastructure, virtual infrastructure, SAN, server management, event management, etc. Basic Qualifications: Bachelor’s degree in a relevant field and 7+ years of professional experience in Network Operations. Additional professional or military experience may be considered in lieu of degree. Active DoD Top Secret clearance with SCI eligibility Ability to obtain a favorable adjudication on a T5 investigation DoD/NSS and Only-Locally-Trusted PKI Operations and Maintenance experience Strong verbal and written communication skills Experience using networked computer-based systems and the Microsoft Windows operating system Ability to work independently and demonstrate strong analytical skills CISSP or equivalent certification Ability to motivate teams, produce quality work under tight timeframes, and manage multiple projects simultaneously Willingness to work a flexible schedule Ability to stand, walk, sit, use hands, reach, climb stairs, balance, stoop, kneel, crouch, or crawl as required Ability to occasionally lift or move up to 25 pounds

Requirements

Bachelor’s degree in a relevant field and 7+ years of professional experience in Network Operations. Additional professional or military experience may be considered in lieu of degree
Active DoD Top Secret clearance with SCI eligibility
Ability to obtain a favorable adjudication on a T5 investigation
DoD/NSS and Only-Locally-Trusted PKI Operations and Maintenance experience
Strong verbal and written communication skills
Experience using networked computer-based systems and the Microsoft Windows operating system
Ability to work independently and demonstrate strong analytical skills
CISSP or equivalent certification
Ability to motivate teams, produce quality work under tight timeframes, and manage multiple projects simultaneously
Willingness to work a flexible schedule
Ability to stand, walk, sit, use hands, reach, climb stairs, balance, stoop, kneel, crouch, or crawl as required
Ability to occasionally lift or move up to 25 pounds

Responsibilities

Serve as the Network SPOC, providing technical oversight and guidance to PKI Network Operations staff
Maintain resilient certificate issuance and revocation infrastructure across MCEN networks
Ensure Marine Corps PKI requirements are integrated into future DoD PKI architecture
Support assessments of USMC impacts from DoD PKI PMO activities, including mobile device PKI and non-person entity issuance
Troubleshoot and resolve PKI-related issues (certificates, tokens, infrastructure services)
Perform user account management, PKI system backups, and disaster recovery tasks
Support SIPRNET Token Management System (TMS) and lead systems administration for DoN PKI
Develop and deliver PKI Tactical Training Plans and materials for garrison and tactical networks
Configure and maintain PKI Tactical training suites using hypervisor technology
Provide training courses for deploying Marines, including PKI 101, CVI, Cryptographic Logon, PKI Administration, and Troubleshooting
Develop and maintain HSM-related training plans and materials
Configure and operate HSM training suites and deliver courses for deploying Marines
Provide technical support for Microsoft Active Directory, DoD PKI, and other CA technologies
Deploy and configure new Certificate Authorities per DoD security standards
Monitor CA health, publish Certificate Revocation Lists, and perform Tier III troubleshooting
Develop and maintain CA disaster recovery and COOP plans
Support CVI technologies, including OCSP, Desktop Validator, and Enterprise Validation Authority
Deploy and maintain CVI software and configurations across USMC networks
Monitor CVI health and perform Tier III troubleshooting
Further support as necessary in the following areas: Tier III PKI issues, public key enabling, configuration management, PKI system infrastructure, virtual infrastructure, SAN, server management, event management, etc.