Senior Cybersecurity Engineer – PKI Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in cyber protection engineering and operations for a significant Federal agency.

• Offer technical expertise in PKI Administration and Certificate Authority operations within complex enterprise settings.

• Aid both internal and external clients with certificate-related inquiries pertaining to USPS applications and services.

• Provide training and guidance to stakeholders regarding PKI lifecycle management, processes, and protocols.

• Analyze complex PKI and certificate-related challenges, propose effective solutions, and suggest enhancements.

• Facilitate certificate automation utilizing the Venafi/CyberArk Trust Protection Platform (TPP).

• Identify possibilities for integrating AI into automation initiatives.

• Generate reports and documentation through the use of AI and other automation resources.

• Offer mentorship and managerial support to the PKI team.

• Establish project requirements for complex and essential applications.

• Provide strategic counsel, technical expertise, and guidance to program and project personnel.

• Remain updated on encryption technologies and standards, particularly PKI and CA products, solutions, and operational best practices.

• Deliver status updates, activity reports, and plans to management.

⛳️ Requirements

• Candidates must be U.S. Citizens and reside in the United States.

• Must be able to obtain Public Trust security vetting approval.

• Extensive experience and skills in automation and scripting.

• In-depth knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft Active Directory auto-enrollment.

• Familiarity with VCERT, Portable Git, Ansible, and Visual Studio Code.

• Proficient in PowerShell and Python scripting languages.

• Strong comprehension of Public Key Infrastructure (PKI), including Certificate Authority (CA) Administration, Certificate Enrollment Web Service & Policy Web Service, and Active Directory Certificate Services (ADCS) monitoring.

• Infrastructure experience in areas such as IT/server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.

• Significant experience with certificate management tools, ideally Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).

• Extensive experience in troubleshooting digital certificate issues.

• Understanding of Post Quantum Cryptography (PQC).

• Ability to work autonomously in a dynamic environment while maintaining attention to detail.

• Excellent communication, organizational, and interpersonal abilities.

• BA/BS in cybersecurity, IT, or a related field, with 9+ years of direct experience in cybersecurity and IT administration/engineering; or 12+ years of experience in cybersecurity and IT administration/engineering.

• U.S. Citizenship is mandatory.

• Capability to obtain Public Trust clearance.

🏝️ Benefits

• Medical Insurance

• Dental Insurance

• Vision Insurance

• Life Insurance

• Short Term & Long Term Disability

• 401k Retirement Savings Plan with Company Match

• Paid Holidays

• Paid Time Off (PTO)

• Tuition and Professional Development Assistance

• REMOTE work flexibility