PKI Systems Administrator

Agil3 Technology Solutions (A3T)•Mechanicsburg, PA

About The Position

A3T is looking for a Public Key Infrastructure (PKI) Systems Administrator to support our team in execution of application support, security and administration to a federal government agency and its mission partners. Job Duties: Responsible for initially installing and configuring the system and for performing ongoing system administration duties such as system change requests user account management, access control management, system configuration management, database maintenance, software upgrades, compromise reporting, and for performing backups. Execute Certificate Registrations (CRs) written by PKI PMO: Configure the system. Install/update applications. Configure host and network interface. Perform software upgrades and recovery. Ensure publication of CRL’s, replication (Daily Checks) Perform system backups. Perform Ad Hoc tasks: Set up user accounts. Assign security privileges and access controls for accounts and other trusted roles. Delete the security audit log and other archive data (when necessary due to file system space limitations; logs/data must be backed up before deletion. Information Awareness Office (IAO) must be present and have reviewed logs/data prior to deletion) Change the host or network interface configuration. Generate any of the passwords/Personal Identification Numbers (PINS) assigned to the keys, operator cards, administrator cards, and/or Security Hardware. Administrative tasks Passwords will be recorded indicating what keys, operator cards, administrator cards, and/or Hardware Security Module (HSM) they are associated with. Manage the passwords/PINs associated with all tokens for HSM operations. Maintain required access logs required for physical security audit requirements. Annual rekey of AES. Will produce archive records on a weekly basis.

Requirements

Secret Clearance required.
Minimum three years’ experience working as system or application administrator in a LINUX environment.
Bachelor’s Degree in an IT-related field (or 6 years of experience in related field) OR have a Vendor Certification (Professional or higher)
Have a baseline IAT Level II certification IAW DOD 8570.01-M (Security+ or higher)
Able to obtain and maintain a Computing Environment (CE) certification within 6 months of start date.

Responsibilities

Initially installing and configuring the system
Performing ongoing system administration duties such as system change requests user account management, access control management, system configuration management, database maintenance, software upgrades, compromise reporting, and for performing backups
Execute Certificate Registrations (CRs) written by PKI PMO
Configure the system
Install/update applications
Configure host and network interface
Perform software upgrades and recovery
Ensure publication of CRL’s, replication (Daily Checks)
Perform system backups
Set up user accounts
Assign security privileges and access controls for accounts and other trusted roles
Delete the security audit log and other archive data (when necessary due to file system space limitations; logs/data must be backed up before deletion. Information Awareness Office (IAO) must be present and have reviewed logs/data prior to deletion)
Change the host or network interface configuration
Generate any of the passwords/Personal Identification Numbers (PINS) assigned to the keys, operator cards, administrator cards, and/or Security Hardware
Manage the passwords/PINs associated with all tokens for HSM operations
Maintain required access logs required for physical security audit requirements
Annual rekey of AES
Produce archive records on a weekly basis