PKI Systems Engineer

2 weeks ago

Springfield, United States SAIC Full time

Description

The Vanguard 2.2.1 contract provides enterprise IT services to the Department of State (DOS) Diplomatic Technology Bureau. The contract currently has an opening for a Public Key Infrastructure (PKI) system engineer. As a PKI Engineer, you will be joining the team to participate and lead in managing, securing, engineering, and governing DOS’s key and certificate management services, including supporting robust, enterprise-grade Public Key Infrastructure (PKI), certificate lifecycle management (CLCM), infrastructure automation and credential management (CMS) systems. Your expertise in developing, implementing, and maintaining PKI solutions will be key to ensuring the integrity and reliability of DOS’s digital communications. You will be a member of a team tasked with providing cryptography expertise, including encryption (at-rest and in-transit) and key management services, as well as design, build and operate PKI related systems on-prem and in Cloud.

This role may allow some remote work based on the customer's request.

Responsibilities include:

  • Performing all aspects of systems design and PKI engineering in support of various PKI systems deployed at the Department of State.
  • Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs).
  • Providing in-depth subject matter expertise for engineering support related to Public Key Infrastructure (PKI) systems, especially in a government setting.
  • Maintaining existing PKI systems – patch existing systems, deploy new components based on customer demand.
  • Assist in evaluating and deploying solutions to support modern authentication (i.e SAML based authentication, FIDO2, PIV Derived Credential, etc.…)
  • Assist in designing and deploying solution in support of migrating to a Zero Trust Architecture environment.
  • Performing problem analysis following any service issues to prevent recurrence.
  • Identifying security risks to customer systems and suggest mitigations.
  • Designing, building, and managing PKI enclaves conforming to the policies and standards of the Department of State, Homeland Security Presidential Directive 12 (HSPD-12), Federal Bridge Certification Authority (FBCA), National Institute of Standards and Technology (NIST), and other policies and standards as required.
  • Identifying security architectures and implementation gaps, vulnerabilities, and risks; developing, testing, and implementing solutions to address the gaps, and new or updated requirements.
  • Developing test cases for software/hardware testing and developing test evaluation reports for stakeholders.
  • Developing and updating systems documentation (e.g., ConOps, Operating procedures, systems architecture documents.)
  • Ensuring the NIST 800-53 Rev. 4 security controls, where applicable, are in place and validated on all PKI systems.
  • Contribute to the technical direction on all areas of PKI architecture, strategies and automation and enforce governance and standards.

Qualifications

Required Education & Experience:

  • Bachelor’s degree in information technology, engineering, computer science, related field, or equivalent experience.
  • 5+ years of experience in PKI, IT security, or related roles, with a strong focus on one or all of these certification authorities (EJBCA , Microsoft CA, Entrust).  May accept less with very strong cloud experience.
  • Deep understanding of cryptographic protocols and algorithms.
  • Proficiency with either EJBCA, Entrust, or Microsoft Certificate Authority.
  • Familiarity with industry standards such as X.509, PKCS, and others.
  • Virtualization technologies – VMWare ESXI, vCenter, VMWare NSX.
  • Working knowledge of external storage solutions, storage area networks (SANs), and Fiber Channel networks.
  • Ability to troubleshoot and resolve network/application/operating system issues.
  • Excellent MS-Windows Server administration & maintenance skills.

Required Clearance:

  • US Citizenship.
  • Ability to obtain top secret clearance.

Preferred Skills:

  • Proficiency in enabling self-service workflow, orchestration, and compliance control.
  • Scripting Skills (PowerShell, Bash &/or Python): Proficiency in scripting with Bash and/or Python. Capable of writing and maintaining scripts for automating routine PKI tasks, enhancing operational efficiency, and reducing manual errors.
  • Experience with one or more Credential Management Systems (CMS) with experience integrating with all facets of certificate lifecycle.
  • Monitoring Expertise: Experience with monitoring tools and technologies. Skilled in setting up and managing systems to monitor the health and performance of the PKI infrastructure, ensuring high availability and proactive issue resolution.
  • Automation Abilities: Demonstrated experience in automating IT processes. Ability to implement automation solutions that streamline PKI operations and improve system reliability and security.
  • Splunk Proficiency: Knowledge of Splunk for log management and analysis. Capable of leveraging Splunk to gain insights into PKI system operations and security, enhancing situational awareness and decision-making.
  • Ability to configure and optimize PKI enrollment and operation protocols such as (SCEP, EST, TLS, etc..), ensuring the latest security standards are met and maintained in our PKI infrastructure.
  • Experience supporting/securing cloud-based services and implementing AWS and Azure cryptography, encryption and key management best practices and policies.
  • Must be able to effectively perform both independently and collaboratively as a strong team contributor.
  • Strong analytical and problem-solving skills.
  • Excellent communication and collaboration abilities with attention to detail.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.

  • PKI Systems Engineer

    1 week ago

    Springfield, United States Conceras Full time

    The Vanguard 2.2.1 contract provides enterprise IT services to the Department of State (DOS) Diplomatic Technology Bureau. The contract currently has an opening for a Public Key Infrastructure (PKI) system engineer. As a PKI Engineer, you will be joining the team to participate and lead in managing, securing, engineering, and governing DOS's key and...

  • PKI Policy Writer and Systems Accreditation Specialist

    1 week ago

    Springfield, Virginia, United States SAIC Full time

    Job OverviewSAIC, a leading technology integrator, is seeking a highly skilled PKI Policy Writer and Systems Accreditation Specialist to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program.Estimated Salary: $115,000 - $140,000 per yearKey ResponsibilitiesDrafting policy documents and applying NIST 800-53 rev.4 controls to...

  • Systems Engineer

    4 weeks ago

    Springfield, United States Allen Integrated Solutions LLC Full time

    Systems Engineer (Expert)-KEY Clearance Required: TS/SCI Minimum Years' Experience: 18 years Overall Assignment Description: We are seeking an experienced professional with expert level knowledge of high performance computing, capable of defining requirements and assessing potential technologies to develop a platform that must work at multiple security...

  • Systems Engineer

    2 weeks ago

    Springfield, United States Allen Integrated Solutions LLC Full time

    Systems Engineer (Expert)-KEY Clearance Required: TS/SCI Minimum Years' Experience: 18 years Overall Assignment Description: We are seeking an experienced professional with expert level knowledge of high performance computing, capable of defining requirements and assessing potential technologies to develop a platform that must work at multiple security...

  • Policy Writer and Audit Support

    4 weeks ago

    Springfield, United States SAIC Full time

    Description The DOS-Systems Integrity Division support team currently has an opening for a Policy Writer to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. This program provides transparent security services in support of the Department’s goals to secure communications among Department staff and systems. The...

  • Windows Systems Engineer

    2 days ago

    Springfield, Virginia, United States Leidos Full time

    We are seeking a highly skilled Windows Systems Engineer to join our team at Leidos. This senior-level position will lead the design, implementation, and maintenance of complex Windows environments, including server administration, virtual hosting, and Citrix virtual desktops.The ideal candidate will have a strong background in Windows Server 2016-2022...

  • Linux Systems Engineer

    1 month ago

    Springfield, Illinois, United States Procession Systems Full time

    Job Description**Key Responsibilities:**Support and maintain infrastructure and applications on Linux systems.Monitor and troubleshoot infrastructure, data feeds, and application availability and system performance.Perform infrastructure and application operations and maintenance support.Troubleshoot server virtualization issues and develop custom scripts to...

  • Policy Writer and Audit Support

    4 weeks ago

    Springfield, United States SAIC Full time

    Description The DOS-Systems Integrity Division support team currently has an opening for a Policy Writer to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. This program provides transparent security services in support of the Department's goals to secure communications among Department staff and systems. The position...

  • Policy Writer and Audit Support

    2 weeks ago

    Springfield, United States SAIC Full time

    DescriptionThe DOS-Systems Integrity Division support team currently has an opening for a Policy Writer to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. This program provides transparent security services in support of the Department’s goals to secure communications among Department staff and systems. The position...

  • Enterprise Systems Engineer

    1 day ago

    Springfield, Virginia, United States BAE Systems USA Full time

    Job OverviewBecome part of our team as an Enterprise Systems Engineer at BAE Systems USA, where you will play a crucial role in designing and implementing cutting-edge IT solutions. As a key member of our Intelligence & Security division, you will work closely with our clients to understand their needs and deliver tailored solutions that meet their...

  • Senior Systems Engineer

    2 weeks ago

    Springfield, Illinois, United States BAE Systems USA Full time

    Job Description:At BAE Systems USA, we are seeking a highly skilled Senior Systems Engineer to join our team of experts in delivering advanced defense, intelligence, and security solutions. This role offers a unique opportunity to work on cutting-edge technology and make a significant impact on our customers' missions. Key Responsibilities:Maintain and...

  • Senior Controls Engineer for Custom Automation Projects

    24 hours ago

    Springfield, Virginia, United States Entegee Full time

    Job OverviewEntegee is a leading provider of custom automation solutions, with a strong presence in the global controls and robotic market. We are currently seeking a skilled Senior Controls Engineer to join our team.Compensation DetailsWe offer a competitive hourly rate of $40.00 to $60.00 per hour, commensurate with experience.Job ResponsibilitiesAs a...

  • Mechanical Design Engineer for Power Systems

    2 days ago

    Springfield, Virginia, United States PD Power Systems LLC Full time

    We are seeking a skilled Mechanical Design Engineer to join our team at PD Power Systems LLC, based in Springfield, VA.As a key member of our design team, you will be responsible for the development and maintenance of electro-mechanical equipment. Your primary focus will be on designing systems and integrating multiple components using SolidWorks from...

  • Senior VMWare Engineer

    1 week ago

    Springfield, United States Elluminates Software Full time

    Sr. VMware Engineer Springfield, VA (on-site) Elluminates Software provides innovation for Federal customers, including AI-driven SaaS, Cloud and On-Prem transformation, and advanced Infrastructure Automation. We have worked closely with the industry to innovate and collaborate on solutions with national and global technology platform impact for over...

  • Senior VMWare Engineer

    2 weeks ago

    Springfield, United States Elluminates Software Full time

    Sr. VMware Engineer Springfield, VA (on-site) Elluminates Software provides innovation for Federal customers, including AI-driven SaaS, Cloud and On-Prem transformation, and advanced Infrastructure Automation. We have worked closely with the industry to innovate and collaborate on solutions with national and global technology platform impact for over...

  • Highly Skilled Controls Engineer

    2 weeks ago

    Springfield, Virginia, United States Entegee Full time

    Job OverviewA challenging opportunity exists for an accomplished Embedded Software Engineer to join our team at Entegee, specializing in custom automation projects and controls solutions.Salary InformationThe estimated salary range for this position is $40.00 to $60.00 per hour, based on industry standards and location considerations.Job...

  • Systems Engineer

    6 days ago

    Springfield, United States ICES Full time

    Intelligence Consulting Enterprise Solutions, INC. is looking for a Systems Engineer Description:  Join ICES on a contract impacting national security as a Systems Engineer These positions are located in Springfield, VA. All positions require an active/current TS/SCI security clearance and be willing and able to pass an additional polygraph as...

  • Systems Engineer

    2 weeks ago

    Springfield, United States Apogee Integration Full time

    Security Clearance: Active TS/SCI with the ability to receive a CI Polygraph required Job Location: Chantilly or Springfield, VA Position Apogee's ideal Systems Engineer shall use the CEA in order to provide FCS MOM governance board support to manage IT requirements identification and associated priorities to inform strategic development, operations and...

  • Systems Engineer

    1 day ago

    Springfield, United States CV Library Full time

    Overview:Eager to join a team where your skills are valued, your growth is nurtured, and your impact is profound? Look no further than Markon, a premier consulting firm deeply dedicated to advancing our nation's most critical missions. At Markon, we don't just offer jobs – we offer opportunities for personal and professional transformation. Empowering our...

  • Systems Engineer

    6 days ago

    Springfield, United States KBR Full time

    Title: Systems Engineer Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national...