Navy Certificate Validation Infrastructure System Administrator

CACI International•North Charleston, SC

5d•$71,500 - $150,200•Onsite

About The Position

Join CACI as a Technical Lead supporting critical Navy communication, cybersecurity, and identity management programs. In this role, you will lead our technical delivery team for the Navy Certificate Validation Infrastructure (NCVI), a vital cybersecurity program that ensures secure, cryptographically validated network authentication and Cryptographic Logon (CLO) enablement across Navy afloat, submarine, and tactical/shore-based enclaves (such as CANES, ISNS, NMCI, and ONE-Net). As the NCVI Technical Lead, you will combine high-level public key infrastructure (PKI) systems engineering with direct operational team management. You will serve as the principal liaison to our government clients at the Naval Information Warfare Center Atlantic (NIWC LANT), driving PKI compliance, managing system validation processes, overseeing Local Registration Authority (LRA) functions, and coordinating response initiatives for fleet cryptographic casualties (CASREPs).

Requirements

Active DoD Secret security clearance at the time of hire, with the ability to obtain and maintain a Top Secret/SCI clearance.
Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Information Technology, or a related STEM field. An equivalent combination of technical military training, Associate's degree, and progressive IT experience may be considered in lieu of a degree.
Minimum of 8–10 years of experience in systems administration, network engineering, or cybersecurity, with at least 3 years executing technical leadership, team management, or lead engineering tasks.
Minimum of 2 years of hands-on experience in DoD/Navy PKI operations, directory services (Active Directory/LDAP), or Common Access Card (CAC) / smart card enabling technologies.
Active IAT Level II baseline certification (e.g., CompTIA Security+ CE, GSEC, SSCP) or higher.
A professional computing environment certification (e.g., RHCSA, Microsoft Certified Windows Server Hybrid Administrator, Linux+, or VMware Certified Professional) or the ability to obtain one within 180 days of hire.

Responsibilities

Oversee the installation, configuration, and engineering maintenance of Validation Authorities (VA), validation servers, and Online Certificate Status Protocol (OCSP) / Certificate Revocation List (CRL) responders.
Lead system administration (hardware, OS, and network virtualization) of hosting systems within Consolidated Afloat Networks and Enterprise Services (CANES) or tactical server environments, managing secure baselines for Red Hat Enterprise Linux (RHEL) and Windows Server instances.
Manage Trust Anchor and Root/Intermediate Certificate Authority (CA) chains (including DISA, NSS, and DoD-approved External CAs) within Navy environments.
Coordinate and track Joint Force Headquarters Department of Defense Information Network (JFHQ-DODIN) PKI Audit compliance.
Conduct and analyze ACAS (Nessus) vulnerability scans, apply operating system patches, and enforce DISA Security Technical Implementation Guides (STIGs) across the NCVI infrastructure.
Maintain system backups, review workstation security logs, and secure PKI archives in accordance with DoD standards.
Host and drive weekly SIPR PKI conference and data calls with DoD stakeholders to address systemic validation issues.
Produce daily operational reports, fleet security bulletins, Standard Operating Procedures (SOPs), and technical knowledge base articles to ensure continuous service improvement.
Support the fleet as the ultimate technical escalation point for high-priority cryptographic failures and token login outages.