PKI Operations Engineer - Active TS/SCI with CI Poly

ENS Solutions, LLC•Washington, DC

About The Position

As a PKI Operations Engineer, you will manage the ongoing administration, maintenance, monitoring, and troubleshooting of enterprise IAM and PKI systems. You will work closely with cybersecurity teams, system administrators, network engineers, and mission stakeholders to ensure identity services remain secure, available, and compliant with operational requirements. In this role, you will perform routine operational activities including certificate issuance and renewal, account and access support, system health monitoring, patching, configuration management, incident response support, and lifecycle maintenance for IAM and PKI platforms. You will help maintain secure authentication and authorization services while supporting operational continuity and compliance initiatives. You will also assist with process improvement efforts, automation initiatives, and operational documentation to enhance efficiency and reliability across the IAM environment. From supporting certificate authorities and credential management systems to troubleshooting authentication issues and maintaining secure access controls, you will help ensure enterprise identity services remain resilient and effective.

Requirements

3+ years of experience supporting or maintaining Public Key Infrastructure (PKI) environments in a cybersecurity or enterprise operations setting
Experience administering and maintaining Active Directory Certificate Services (AD CS)
Experience performing operational support activities, including monitoring, patching, troubleshooting, and maintenance of security systems
Experience supporting Certificate Authority (CA) operations, maintenance, and sustainment activities
Experience with certificate lifecycle management processes, including issuance, renewal, revocation, and automation support
Experience documenting operational procedures, troubleshooting guides, and maintenance activities
Knowledge of certificate policies, certificate structures, and operational compliance requirements
Knowledge of Linux systems administration and asymmetric cryptography concepts and applications
Active TS/SCI clearance; willingness to take a polygraph exam
HS diploma or GED

Nice To Haves

Experience supporting Keyfactor and Venafi platforms in an operational environment
Experience maintaining and troubleshooting ACME and SCEP processes
Experience with operational automation or scripting for certificate management tasks
Security+ Certification

Responsibilities

Manage the ongoing administration, maintenance, monitoring, and troubleshooting of enterprise IAM and PKI systems.
Perform routine operational activities including certificate issuance and renewal, account and access support, system health monitoring, patching, configuration management, incident response support, and lifecycle maintenance for IAM and PKI platforms.
Help maintain secure authentication and authorization services while supporting operational continuity and compliance initiatives.
Assist with process improvement efforts, automation initiatives, and operational documentation to enhance efficiency and reliability across the IAM environment.
Support certificate authorities and credential management systems.
Troubleshoot authentication issues and maintain secure access controls.