Senior PKI Administrator - Certificate Authority Operations

Dragonfli Group • Washington, DC

5d • Remote

About The Position

Dragonfli Group is seeking a Senior-Level PKI Security Admin / Subject Matter Expert to support Public Key Infrastructure (PKI) and Certificate Authority (CA) operations for a large federal agency. This fully remote role owns the day-to-day health of certificate services — from Certificate Authority administration and Active Directory Certificate Services (ADCS) monitoring to certificate lifecycle guidance for internal and external stakeholders — while driving automation and AI-assisted improvements across the PKI program. The ideal candidate brings 9+ years of relevant experience, deep hands-on expertise with Venafi and/or CyberArk TPP, Microsoft Certificate Authority, and Hardware Security Modules (HSMs), and is comfortable supervising a PKI team while advising program and project stakeholders on complex, mission-critical certificate issues. This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.

Requirements

• Bachelor's degree in computers, IT, or a Security-related field; or equivalent experience.
• 9+ years of relevant PKI/certificate management experience.
• Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.
• Familiarity with VCERT, Portable Git, Ansible, and Visual Studio Code.
• Proficiency in PowerShell scripting.
• Strong understanding of PKI, including Certificate Authority Administration, Certificate Enrollment Web Service & Policy Web Service, and Active Directory Certificate Services (ADCS) monitoring.
• Infrastructure experience in one or more of: IT/server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.
• Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).
• Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.
• Knowledge of Post-Quantum Cryptography.
• Strong communication skills with IT customers, developers, and system administrators.

Nice To Haves

• Experience with ServiceNow or other Change/Incident/Problem management ticketing technology.
• IT system administration experience (systems management, networks, firewalls) in an enterprise environment.
• Experience with directory technologies for authentication (LDAP, Active Directory).
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
• Experience with Unix and Linux configuration and troubleshooting.
• Experience with TLS/SSL-based technologies (F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.).
• Proficiency with server virtualization technologies (VMware, Hyper-V).
• Database administration (MSSQL) experience.
• Relevant training/certifications: A+, Network+, Security+, nCSE, Venafi/CyberArk Admin, Certified Encryption Engineer, CCENT, CCNA.

Responsibilities

• Support internal and external customers with certificate-related issues across the agency's applications and services.
• Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
• Create reports and documentation using AI and other automation tools.
• Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
• Support certificate automation using Venafi/CyberArk TPP, identifying opportunities to incorporate AI into automation efforts.
• Supervise the PKI team, develop project requirements for complex and critical applications, and provide sound strategic advice, technical expertise, and guidance to program and project staff.
• Work independently in a fast-paced environment with strong attention to detail.

Benefits

• Medical — Multiple POS health plan options including an HSA-compatible plan
• Dental — PPO coverage for preventive, basic, and major services
• Vision — Annual exam, frames, lenses, and contact lens allowance
• 401(k) — Employer match up to 5% of eligible compensation
• Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings
• Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each
• PTO — 15–25 days annually based on tenure
• Paid Federal Holidays — All 11 federal holidays observed

What This Job Offers

• Job Type: Full-time
• Career Level: Senior