PKI Systems Engineer
About The Position
The Enterprise & Mission Solution Business Unit is hiring a senior-level Public Key Infrastructure (PKI) Systems Engineer to support the Department of State (DoS) Bureau of Information Resource Management (IRM) PKI program under the Vanguard 2.2.1 contract. The program provides transparent security services that help secure communications among Department staff and systems. The position is part of the Vanguard 2.2.1 program’s Enterprise Engineering Office (EEO). It provides PKI engineering and integration support, including administration, maintenance, and deployment of Entrust-based PKI systems. Work takes place onsite at DoS datacenters and selected domestic and overseas locations. The role also provides tier-3 support in a large enterprise environment.
Requirements
- At least 5 years of relevant work experience with a bachelor’s degree, or 3 years of relevant work experience with a master’s degree.
- Excellent Microsoft Windows Server administration and maintenance skills.
- Familiarity with PKIs, related technologies such as LDAP directories, HSMs, and OCSP, and security practices.
- Excellent oral and written communication skills.
- Excellent analytical and troubleshooting skills.
- Working knowledge of Entrust PKI products, including Security Manager, Administration Services, and Security Manager Proxy.
- Hands-on experience with Hardware Security Modules (HSMs).
- Experience with LDAP directory products, such as Critical Path or Active Directory.
- CISSP, Security+, or a similar certification.
- Experience configuring network devices, including Cisco and Juniper firewalls and switches.
- Knowledge of network infrastructure diagnostics, TCP/IP networking, and network monitoring tools.
- Experience with virtualization technologies such as ESX/ESXi.
- Working knowledge of external storage solutions.
- Interpersonal skills, including the ability to collaborate effectively and demonstrate self-awareness.
Nice To Haves
- Working knowledge of Entrust PKI products, including Security Manager, Administration Services, and Security Manager Proxy, especially in a government setting.
- Hands-on experience with Hardware Security Modules (HSMs).
- Experience with LDAP directory products, such as Critical Path or Active Directory.
- CISSP, Security+, or a similar certification.
- Experience configuring Cisco and Juniper firewalls and switches.
- Knowledge of TCP/IP networking and network monitoring tools.
- Experience with virtualization technologies such as ESX/ESXi.
- Working knowledge of external storage solutions.
- Ability to collaborate effectively, demonstrate self-awareness, and communicate excellently in writing and orally.
Responsibilities
- Provide PKI engineering support for PKI systems deployed at the Department of State.
- Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs).
- Work directly with customers to analyze requirements and deploy security-related solutions.
- Analyze problems after service issues and identify ways to prevent recurrence.
- Evaluate products and make product recommendations.
- Identify security risks to systems and suggest mitigations.
- Develop test cases for software and hardware testing and prepare test evaluation reports for stakeholders.
- Develop and update systems documentation, including concepts of operations, operating procedures, and systems architecture documents.
- Administer, maintain, and deploy Entrust-based PKI systems at DoS datacenters and selected domestic and overseas locations.
- Provide tier-3 support in a large enterprise environment.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
