PKI Engineering Specialist
About The Position
NTT DATA is seeking a PKI Engineering Specialist to plan, deploy, administer, and maintain enterprise Public Key Infrastructure environments supporting Department of Defense requirements. The role is responsible for the security, availability, compliance, and operational effectiveness of PKI services, including certificate authorities, hardware security modules, certificate lifecycle management systems, and supporting applications. The position is based in Newport News, Virginia, and requires daily onsite presence. It provides customer support in a Hybrid Agile Enterprise Environment. The successful candidate should be able to work independently with little oversight, research problems, develop and present complete solutions, and implement them after appropriate approval. Strong attention to detail, organizational ability, and care in handling information in a mixed-stakeholder environment are important.
Requirements
- At least 6 years of experience planning, deploying, administering, and maintaining enterprise PKI environments.
- IAT II or higher certification.
- Active Secret security clearance.
- Ability to work independently with little to no oversight.
- Ability to research problems, develop and present complete solutions, and implement them after appropriate approval.
- Ability to work in a mixed-stakeholder environment while maintaining fidelity of information.
- Exceptional attention to detail and organizational abilities.
Nice To Haves
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field.
- Industry certifications related to PKI, cybersecurity, Microsoft infrastructure, or cryptography.
- Experience with Microsoft Active Directory Certificate Services (AD CS), Entrust, Keyfactor, Venafi, or similar PKI management platforms.
- Experience integrating PKI services with identity management, smart card authentication, and enterprise security solutions.
- Active Top Secret clearance.
Responsibilities
- Serve as the technical lead for enterprise PKI initiatives, including planning, deploying, integrating, and maintaining Microsoft and DoD-compliant PKI solutions.
- Design, implement, manage, and support certificate authority infrastructure, including root and subordinate CAs.
- Administer and maintain hardware security modules used for cryptographic key protection and certificate authority operations.
- Develop, implement, and maintain PKI policies, certificate practice statements, and operational procedures in accordance with DoD, NIST, and industry best practices.
- Manage the certificate lifecycle, including enrollment, issuance, renewal, revocation, recovery, and auditing for user, computer, server, network device, and application certificates.
- Deploy and support certificate management solutions and applications for automated certificate enrollment and lifecycle management.
- Ensure PKI systems comply with FISMA, DISA STIGs, and other applicable cybersecurity requirements.
- Monitor PKI health; troubleshoot and perform root cause analysis and incident response for certificate-related issues.
- Coordinate with cybersecurity, network, system administration, and application teams to integrate PKI services into enterprise solutions.
- Participate in project planning and execution in a hybrid-agile environment, potentially serving as Scrum Master as needed.
- Analyze enterprise PKI architectures to identify deficiencies, risks, and improvement opportunities, and provide recommendations and implementation support.
- Document PKI architectures, configurations, operational procedures, disaster recovery plans, and system changes.
- Mentor and provide technical guidance to team members on PKI concepts, certificate management practices, and cryptographic technologies.
Benefits
- Medical, dental, and vision insurance with an employer contribution.
- Flexible spending or health savings account.
- Life and AD&D insurance.
- Short- and long-term disability coverage.
- Paid time off.
- Employee assistance program.
- 401(k) program with company match.
- Additional voluntary or legally required benefits.
- May be eligible for incentive compensation based on individual and/or company performance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
