SITEC - PKI Systems Administrator - MacDill AFB
About The Position
Peraton is seeking a PKI Systems Administrator to support the Special Operations Command Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance task order at MacDill AFB in Florida. The contract provides USSOCOM, its Component Commands, Theater Special Operations Commands, and deployed forces with operations and maintenance services, including network operations, systems and network infrastructure support, end-user and common-device support, configuration and asset management, training, and install, move, add, and change services. The role administers and supports enterprise Public Key Infrastructure across a multi-domain, multi-platform environment spanning four networks and more than 85,000 globally distributed users. The administrator will work with Microsoft Windows Server 2019/2022 and Active Directory Certificate Services, Red Hat Enterprise Linux, Cisco Identity Services Engine, OCSP responders, physical HSMs, and certificate distribution services. The position also performs Tier 2 and Tier 3 troubleshooting, supports certificate lifecycle operations and integrations with enterprise identity, networking, mobile device management, and virtualized environments, and maintains operational documentation and security compliance. Shift schedules, on-call rotations, and weekend maintenance windows may be required.
Requirements
- At least 12 years of experience with a high school diploma, 10 years with an AS/AA degree, or 8 years with a BS/BA degree.
- DoW TS/SCI clearance.
- DoW 8570.01-M IAT II certification.
- DoW 8140 compliance under Work Role Code 451 – System Administrator, Intermediate level or higher.
- Practical experience in a Systems Administrator or PKI Administrator role supporting enterprise production environments.
- Hands-on experience administering Microsoft Windows Server 2019/2022 and Active Directory Certificate Services (ADCS).
- Operational experience supporting multi-platform Certificate Authorities, with working knowledge of Red Hat Enterprise Linux and/or Cisco ISE.
- Familiarity with installing, configuring, and monitoring the health of OCSP responders and CRL distribution points.
- General understanding of HSMs and their role in protecting cryptographic root keys.
- Demonstrated experience using PowerShell to automate certificate reporting, monitoring, and maintenance.
- Solid understanding of networking protocols, TLS/SSL handshake negotiation, and authentication protocols such as Kerberos and LDAPS.
- Previous experience supporting large-scale enterprise environments with more than 50,000 users.
- Willingness to support shift schedules, on-call rotations, and weekend maintenance windows as required.
Nice To Haves
- Linux Red Hat experience.
- Microsoft Certified: Windows Server Hybrid Administrator Associate.
- Microsoft Certified: Identity and Access Administrator Associate.
- Red Hat Certified System Administrator (RHCSA).
- VMware Certified Associate (VCA) or VMware Certified Professional (VCP).
- Cisco Certified Network Associate (CCNA).
Responsibilities
- Perform daily administration, maintenance, monitoring, and operational support for enterprise Certificate Authorities across Windows ADCS, Red Hat Enterprise Linux, and Cisco ISE.
- Manage the end-to-end certificate lifecycle, including issuance, renewal, revocation, and re-keying for enterprise systems, network devices, web servers, and user authentication tokens.
- Configure, maintain, and publish certificate templates for TLS/SSL, code signing, machine identity, and smart card enrollment.
- Monitor and maintain OCSP infrastructure and Certificate Revocation Lists (CRLs), ensuring availability and validation accuracy.
- Assist with health checks, administrative monitoring, and maintenance of physical HSM appliances at primary and secondary data center nodes, supporting migration of enterprise CAs behind HSM backends.
- Deploy, support, and troubleshoot third-party CAC and middleware software, including ActiveClient and 90 Meter, and resolve authentication and certificate enrollment errors.
- Maintain third-party certificate validation and revocation software, including Axway/Tumbleweed, and Network Device Enrollment Service (NDES) endpoints.
- Support PKI integration with Active Directory, Kerberos, LDAPS, enterprise networking, mobile device management (Hypori/MobileIron), and vSphere environments.
- Resolve Tier 2 and Tier 3 PKI incident tickets and perform root-cause analysis for certificate trust issues, expired tokens, and validation failures.
- Maintain operational standard operating procedures and configuration baselines, and ensure PKI components comply with DoD STIG and zero-trust security mandates.
- Support shift schedules, on-call rotations, and weekend maintenance windows as required.
Benefits
- Employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
High school or GED
