Senior PKI Engineer

SAIC•Springfield, VA

4h•Onsite

About The Position

The Enterprise & Mission Solution Business Unit is seeking a Public Key Infrastructure (PKI) Subject Matter Expert (SME) to support the Department of State (DoS) Bureau of Information Resource Management (IRM) PKI program. This program aims to provide transparent security services to secure communications among Department staff and systems, operating under the “Vanguard 2.2.1” contract. This is a senior-level PKI engineering position within the Vanguard 2.2.1 program’s Enterprise Engineering Office (EEO). The role involves providing PKI engineering and integration support, as well as administering, maintaining, and deploying various PKI systems based on Entrust solutions. The work will be performed onsite at various DoS Datacenters and at selected DoS domestic and overseas locations.

Requirements

Strong skills in designing, installing, configuring, and maintaining PKI systems

Nice To Haves

Experience in providing tier-3 level support in large enterprises

Responsibilities

Performing all aspects of systems design and PKI engineering in support of various PKI systems deployed at the Department of State.
Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs)
Providing in-depth subject matter expertise for engineering support related to Public Key Infrastructure (PKI) systems, especially in a government setting.
Maintaining existing PKI systems – patch existing systems, deploy new components based on customer demand
Directly working with customer to analyze requirements and then deploy security related solution to meet those requirements.
Performing problem analysis following any service issues to prevent recurrence
Performing product evaluations and making product recommendations
Identifying security risks to customer systems and suggest mitigations
Designing, building, and managing PKI enclaves conforming to the policies and standards of the Department of State, Homeland Security Presidential Directive 12 (HSPD-12), Federal Bridge Certification Authority (FBCA), National Institute of Standards and Technology (NIST), and other policies and standards as required.
Identifying security architectures and implementation gaps, vulnerabilities, and risks; developing, testing, and implementing solutions to address the gaps, and new or updated requirements.
Developing test cases for software/hardware testing and developing test evaluation reports for stakeholders.
Lead an effort in gathering requirements, performing gap analysis, developing and presenting potential solutions, and creating detailed design and implementation plans.
Developing and updating systems documentation (e.g., ConOps, Operating procedures, systems architecture documents)
Ensuring the NIST 800-53 Rev. 4 security controls, where applicable, are in place and validated on all PKI systems.