Senior PKI Administrator – Certificate Authority Operations

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist both internal and external clients with certificate-related inquiries concerning agency applications and services.

• Offer guidance and training on the management, processes, and procedures of the PKI lifecycle.

• Generate reports and documentation utilizing AI and various automation tools.

• Analyze intricate PKI and certificate-related challenges, devise effective solutions, and suggest operational enhancements.

• Facilitate certificate automation through Venafi/CyberArk TPP and spot opportunities to integrate AI into automation processes.

• Oversee the PKI team.

• Establish project requirements for complex and vital applications.

• Deliver strategic counsel, technical knowledge, and support to program and project personnel.

• Operate independently in a dynamic environment with a keen focus on detail.

⛳️ Requirements

• Bachelor’s degree in computer science, IT, or a Security-related discipline; or equivalent experience.

• Over 9 years of pertinent PKI/certificate management experience.

• U.S. Citizenship or Permanent Residency is mandatory.

• In-depth understanding of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.

• Familiarity with VCERT, Portable Git, Ansible, and Visual Studio Code.

• Skilled in PowerShell scripting.

• Comprehensive knowledge of PKI, encompassing Certificate Authority Administration, Certificate Enrollment Web Service & Policy Web Service, and Active Directory Certificate Services (ADCS) monitoring.

• Infrastructure experience in one or more areas: IT/server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.

• Significant experience with certificate management tools, ideally Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).

• Extensive experience in troubleshooting digital certificate issues, with a focus on advancing automation and AI-driven solutions.

• Understanding of Post-Quantum Cryptography.

• Excellent communication skills with IT customers, developers, and system administrators.

• Prior federal contracting experience is preferred.

• Experience with ServiceNow or other Change/Incident/Problem management ticketing systems is preferred.

• IT system administration experience in an enterprise setting is preferred.

• Experience with LDAP and Active Directory is preferred.

• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting is preferred.

• Experience with Unix and Linux configuration and troubleshooting is preferred.

• Experience with TLS/SSL-based technologies is preferred.

• Proficiency with VMware or Hyper-V is preferred.

• Database administration (MSSQL) experience is preferred.

• Relevant training/certifications are preferred, including A+, Network+, Security+, nCSE, Venafi/CyberArk Admin, Certified Encryption Engineer, CCENT, or CCNA.

🏝️ Benefits

• Medical — Multiple POS health plan options, including an HSA-compatible plan.

• Dental — PPO coverage for preventive, basic, and major services.

• Vision — Annual exam, frames, lenses, and contact lens allowance.

• 401(k) — Employer match up to 5% of eligible compensation.

• Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings.

• Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each.

• PTO — 15–25 days annually based on tenure.

• Paid Federal Holidays — All 11 federal holidays observed.