PKI Systems Engineer

SAIC • Springfield, VA

1d • Onsite

About The Position

The Enterprise & Mission Solution Business Unit is hiring a senior-level Public Key Infrastructure (PKI) Systems Engineer to support the Department of State (DoS) Bureau of Information Resource Management (IRM) PKI program under the Vanguard 2.2.1 contract. The program provides transparent security services to help secure communications among Department staff and systems. The position is part of the program’s Enterprise Engineering Office (EEO) and provides PKI engineering and integration support, including administering, maintaining, and deploying Entrust-based PKI systems. Work is performed onsite at DoS datacenters and selected domestic and overseas DoS locations.

The engineer supports the operation of multiple PKI systems and manages and maintains enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs). The role works directly with customers to analyze requirements and deploy security solutions, investigates service issues to prevent recurrence, evaluates products and makes recommendations, identifies system security risks and mitigations, develops hardware and software test cases and evaluation reports, and creates and updates system documentation such as concepts of operations, operating procedures, and architecture documents.

Requirements

• At least 5 years of relevant work experience with a bachelor’s degree, or 3 years of relevant work experience with a master’s degree.
• Excellent Microsoft Windows Server administration and maintenance skills.
• Familiarity with PKIs, related technologies such as LDAP directories, HSMs, and OCSP, and security practices.
• Excellent oral and written communication skills.
• Strong analytical and troubleshooting skills.
• Working knowledge of Entrust PKI products, including Security Manager, Administration Services, and Security Manager Proxy; government-setting experience is noted.
• Hands-on experience with Hardware Security Modules (HSMs).
• Experience with LDAP directory products such as Critical Path or Active Directory.
• CISSP, Security+, or a similar certification.
• Experience configuring network devices, including Cisco and Juniper firewalls and switches.
• Knowledge of network infrastructure diagnostics, TCP/IP networking, and network monitoring tools.
• Experience with virtualization technologies such as ESX/ESXi.
• Working knowledge of external storage solutions.
• Interpersonal skills, including effective collaboration and self-awareness.

Nice To Haves

• Working knowledge of Entrust PKI products, including Security Manager, Administration Services, and Security Manager Proxy, especially in a government setting.
• Hands-on experience with Hardware Security Modules (HSMs).
• Experience with LDAP directory products such as Critical Path or Active Directory.
• CISSP, Security+, or a similar certification.
• Experience configuring Cisco and Juniper firewalls and switches.
• Knowledge of TCP/IP networking, network infrastructure diagnostics, and network monitoring tools.
• Experience with virtualization technologies such as ESX/ESXi.
• Working knowledge of external storage solutions.
• Strong collaboration, self-awareness, and written and oral communication skills.

Responsibilities

• Provide PKI engineering support for the operation of PKI systems deployed at the Department of State.
• Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs).
• Work directly with customers to analyze requirements and deploy security-related solutions.
• Analyze service issues and recommend actions to prevent recurrence.
• Evaluate products and make product recommendations.
• Identify system security risks and suggest mitigations.
• Develop hardware and software test cases and prepare test evaluation reports for stakeholders.
• Develop and update system documentation, including concepts of operations, operating procedures, and systems architecture documents.
• Administer, maintain, and deploy Entrust-based PKI systems at DoS datacenters and selected domestic and overseas locations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior