PKI Systems Engineer

SAIC • Springfield, VA

1d • Onsite

About The Position

SAIC is hiring a senior-level Public Key Infrastructure (PKI) Systems Engineer for the Department of State (DoS) Bureau of Diplomatic Technology PKI program under the Vanguard 2.2.1 contract. The program provides security services that support secure communications among Department staff and systems. The engineer will work within the program’s Enterprise Engineering Office, providing PKI engineering and integration support and administering, maintaining, and deploying Entrust-based PKI systems. The work takes place at DoS datacenters and selected domestic and overseas DoS locations. The role requires working onsite in Springfield, Virginia at least four days per week.

The engineer will support PKI operations, maintain associated infrastructure, work with the customer to analyze requirements and deploy security solutions, and help prevent recurring service issues. Other work includes evaluating products, identifying system security risks and mitigations, developing hardware and software test cases and evaluation reports, and maintaining system documentation.

Requirements

• Bachelor’s degree and at least 9 years of relevant work experience, or a master’s degree and at least 7 years of relevant work experience; additional experience may be accepted in lieu of a degree.
• Excellent Microsoft Windows Server administration and maintenance skills.
• Familiarity with PKI and related technologies, including LDAP directories, HSMs, and OCSP, and with security practices.
• Excellent oral and written communication skills.
• Excellent analytical and troubleshooting skills.
• Working knowledge of Entrust PKI products, including Security Manager, Administration Services, and Security Manager Proxy.
• Hands-on experience with HSMs.
• Experience with directory products such as LDAP, Critical Path, or Active Directory.
• CISSP, Security+, or a similar certification.
• Experience configuring network devices, including Cisco and Juniper firewalls and switches.
• Knowledge of network infrastructure diagnostics, general TCP/IP networking, and network monitoring tools.
• Experience with virtualization technologies such as ESX/ESXi.
• Working knowledge of external storage solutions.
• Interpersonal skills, including the ability to collaborate effectively and self-awareness.
• U.S. citizenship.
• Ability to obtain a top secret clearance and obtain an interim top secret clearance before starting work.

Nice To Haves

• Working knowledge of Entrust PKI products, including Security Manager, Administration Services, and Security Manager Proxy, especially in a government setting.
• Hands-on experience with HSMs.
• Experience with directory products such as LDAP, Critical Path, or Active Directory.
• CISSP, Security+, or a similar certification.
• Experience configuring Cisco and Juniper firewalls and switches.
• Knowledge of TCP/IP networking, network infrastructure diagnostics, and network monitoring tools.
• Experience with virtualization technologies such as ESX/ESXi.
• Working knowledge of external storage solutions.
• Interpersonal skills, including effective collaboration, self-awareness, and strong written and oral communication.

Responsibilities

• Provide engineering support for PKI systems deployed at the Department of State.
• Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs).
• Work directly with the customer to analyze requirements and deploy security-related solutions.
• Analyze problems following service issues to prevent recurrence.
• Evaluate products and make product recommendations.
• Identify system security risks and suggest mitigations.
• Develop software and hardware test cases and test evaluation reports for stakeholders.
• Develop and update system documentation, including concepts of operations, operating procedures, and system architecture documents.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior