PKI Security Administrator

This is a fully remote position, open to applicants in North Carolina, +2 more states.

📋 Description

• Assist the United States Postal Service (USPS)

• Aid both internal and external customers with certificate-related concerns across USPS applications and services

• Offer guidance and training to stakeholders regarding PKI lifecycle management, processes, and procedures

• Generate reports and documentation utilizing AI and automation tools

• Analyze complex PKI and certificate-related issues, devise solutions, and suggest operational enhancements

• Facilitate certificate automation using Venafi/CyberArk TPP and pinpoint opportunities to integrate AI

• Oversee the PKI team

• Establish project requirements for intricate and vital applications

• Provide strategic counsel, technical expertise, and guidance to program and project personnel

• Operate independently in a dynamic environment with meticulous attention to detail

⛳️ Requirements

• Over 9 years of relevant experience

• A Bachelor’s degree in computer science or a related technical field is preferred but not mandatory

• If lacking a relevant college degree, an additional 4 years of relevant work experience is necessary

• In-depth knowledge of REST API integration, SCEP, and Microsoft AD auto-enrollment

• Acquainted with VCERT, Portable Git, Ansible, and Visual Studio Code

• Skilled in PowerShell scripting

• Strong comprehension of PKI, including Certificate Authority Administration, Certificate Enrollment Web Service, Policy Web Service, and ADCS monitoring

• Infrastructure experience in IT/server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration

• Excellent communication skills with IT customers, developers, and system administrators

• Extensive experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and HSMs

• Significant experience troubleshooting digital certificate issues

• Familiarity with Post Quantum Cryptography

• Capability to obtain and maintain a Public Trust clearance and successfully pass government background checks with detailed forms and fingerprinting

• U.S. residency requirement: must have resided in the U.S. or U.S. Territories under the specified USPS five-year residency criteria

• Preferred experience with ServiceNow or other change/incident/problem management ticketing systems

• Preferred experience with enterprise IT system administration, user directory technologies, Windows Server, Unix/Linux, TLS/SSL technologies, VMware/Hyper-V, and MSSQL

• Preferred training includes A+, NET+, SEC+, nCSE, Venafi/CyberArk Admin, certified encryption engineer, CCENT, and CCNA

🏝️ Benefits

• 401K with company match

• Comprehensive health and wellness packages

• Internal mobility team dedicated to helping you manage your career

• Opportunities for professional growth including funded education and certifications

• Access to cutting-edge technology for learning

• Paid vacation and holidays

• Options for medical, dental, and vision plans

• Health Savings Account options

• Flexible work weeks when feasible

• Paid sick and personal time

• Paid parental, military, bereavement, and jury duty leave

• Up to 160 hours of paid family leave within a rolling 12-month period for eligible employees

• Short- and long-term disability benefits

• Life insurance

• Accidental death and dismemberment insurance

• Personal accident insurance

• Critical illness insurance

• Business travel and accident insurance