Senior Cybersecurity Engineer - PKI Security

Phia LLC• US,

6d•$110,608 - $163,137•Remote

About The Position

At phia we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. phia is hiring a Senior Cybersecurity Engineer (PKI Security) to support cyber protection engineering and operations at a large Federal agency. This role focuses on providing technical expertise for PKI Administration and Certificate Authority operations across complex enterprise environments. The ideal candidate will have deep experience with encryption technologies, PKI administration and operations, and configuration automation and scripting. This position offers REMOTE work flexibility. Qualified candidates will be U.S. Citizens and located in the United States, able to achieve Public Trust security vetting approval.

Requirements

Extensive automation and scripting experience and capabilities
Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment
Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code
Proficiency in PowerShell and Python scripting
Strong understanding of Public Key Infrastructure (PKI) including: Certificate Authority (CA) Administration, Certificate Enrollment Web Service & Policy Web Service, Active Directory Certificate Services (ADCS) monitoring
Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration
Strong communication skills with IT customers, developers, and system administrators
Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs)
Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions
Knowledge of Post Quantum Cryptography (PQC)
Ability to work independently, work in a fast-paced environment, and attention to detail
Excellent communication, organizational, and interpersonal skills
BA/BS in cybersecurity, IT or related field, with 9+ years of direct experience in cybersecurity and IT administration/engineering OR 12+ years of experience in cybersecurity and IT administration/engineering
U.S. Citizenship required
Ability to obtain Public Trust clearance

Nice To Haves

Experience with ServiceNow or other Change/Incident/Problem management ticketing technology
IT system administration experience (systems management, networks, firewalls) in an enterprise environment
Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
Experience with Microsoft Windows Server configuration, deployment, and troubleshooting
Experience with Unix and Linux configuration and troubleshooting
Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
Proficiency with server virtualization technologies (VMWare, HyperV)
Database administration (MSSQL) experience
CyberArk / Venafi Security Administrator (VSA)
Entrust nShield Certified Systems Engineer (nCSE)
EC-Council Certified Encryption Specialist (ECES)
Core cybersecurity certifications (e.g. CISSP, CompTIA Security+)
Core networking certifications (e.g. CompTIA Network+, CCNA, CCENT)

Responsibilities

Support internal and external customers with certificate-related issues across USPS applications and services.
Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
Support certificate automation using Venafi/CyberArk Trust Protection Platform (TPP) identifying opportunities to incorporate AI into automation efforts.
Create reports and documentation using AI and other automation tools.
Provide mentorship and management support for the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff
Stay current on encryption technologies and standards, with particular focus on PKI and CA productions, solutions, and operational best practices.
Provide status and activity reporting and plans to management.