PKI Engineer

1 month ago


Springfield, United States Apex Systems Full time
Job#: 2040203

Job Description:

Apex Systems is seeking a Senior PKI Engineer to support the Department of State.
If interested, please email your resume
#clearance

Position: PKI Engineer
Location: Fully onsite in Springfield, VA
Hours: Mon-Fri 3PM-11PM
Job type: 6+ month contract, potential to extend
Salary: 150,000/yr
Clearance: Active secret required at minimum

Position Description:

The Vanguard 2.2.1 contract currently has an opening for a Public Key Infrastructure (PKI) Systems Engineer to support the Department of State (DoS) Bureau of Information Resource Management (IRM) PKI program. This program provides transparent security services in support of the Department's goals to secure communications among Department staff and systems. The position falls under the "SI Division support service line of the contract.

This is a fantastic opportunity for a great Systems Engineer to expand their skillset and learn PKI It will be a senior level PKI engineering position, providing PKI engineering and integration support, administering, maintaining, and deploying various PKI systems on prem and in cloud.

The preferred candidate must possess strong skills in designing, installing, configuring, and maintaining PKI systems. Additionally, the preferred candidate should have some experience in providing tier-3 level support in large enterprises. Cloud Key vaulting, Zero Trust Architecture and modern authentication know how are highly desirable.

Responsibilities include:
  • Performing all aspects of systems design and PKI engineering in support of various PKI systems deployed at the Department of State.
  • Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs)
  • Providing in-depth subject matter expertise for engineering support related to Public Key Infrastructure (PKI) systems, especially in a government setting.
  • Maintaining existing PKI systems - patch existing systems, deploy new components based on customer demand
  • Assist in evaluating and deploying solutions to support modern authentication (i.e SAML based authentication, FIDO2, PIV Derived Credential, etc....)
  • Assist in designing and deploying solution in support of migrating to a Zero Trust Architecture environment
  • Performing problem analysis following any service issues to prevent recurrence
  • Identifying security risks to customer systems and suggest mitigations
  • Designing, building, and managing PKI enclaves conforming to the policies and standards of the Department of State, Homeland Security Presidential Directive 12 (HSPD-12), Federal Bridge Certification Authority (FBCA), National Institute of Standards and Technology (NIST), and other policies and standards as required.
  • Identifying security architectures and implementation gaps, vulnerabilities, and risks; developing, testing, and implementing solutions to address the gaps, and new or updated requirements.
  • Developing test cases for software/hardware testing and developing test evaluation reports for stakeholders.
  • Developing and updating systems documentation (e.g., ConOps, Operating procedures, systems architecture documents.)
  • Ensuring the NIST 800-53 Rev. 4 security controls, where applicable, are in place and validated on all PKI systems.
  • Contribute to the technical direction on all areas of PKI architecture, strategies and automation and enforce governance and standards.

Qualifications

Required Education, Experience, Skills, Attributes
  • Bachelors and five (5) years or more of relevant experience; Masters and three (3) years or more of relevant experience; may accept additional experience in lieu of degree
  • Strong background in the Microsoft server operating systems and Certificate Authority (CA) providers
  • General understanding of cryptographic keys, symmetric and asymmetric keys, cryptographic key algorithms and cipher blocks
  • Working knowledge with network devices particularly Cisco switches.
  • Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
  • Virtualization technologies - VMWare ESXI, vCenter, VMWare NSX
  • Working knowledge of external storage solutions, storage area networks (SANs), and Fiber Channel networks
  • Professionally and effectively communicate; both verbal and written at all levels within the organization
  • Ability to think analytically, troubleshoot, and solve problems
  • Ability to troubleshoot and resolve network/application/operating system issues
  • Self-starter, able to work independently with minimum supervision
  • Excellent MS-Windows Server administration & maintenance skills
  • Excellent oral and written communication skills
  • Excellent analytical and troubleshooting skills

Required Clearance
  • ship
  • Must have the ability to obtain Top Secret clearance.
  • Active Secret or Top Secret clearance is preferred.


Desired Experience, Skills, & Attributes
  • Knowledge of Entrust suite of PKI products (Security Manager, Administration Services, Security Manager Proxy) especially in a government setting.
  • Hands-on experience with Hardware Security Modules (HSMs), and external storage solutions.
  • Working knowledge with a Card Management Systems (CMS) solution for Smart Cards.
  • Experience integrating managed devices into MDM solutions (AirWatch, Intune).
  • Understanding of cloud security implementation practices, particularly PKI related. (Azure, AWS, etc.)
  • Working knowledge of Zero Trust Architecture and modern credential management and authentication
  • PowerShell scripting experience and/or other scripting expertise.
  • Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
  • Expert level skills in virtualization technologies (e.g., VMWare vSphere)
  • Operational experience with LDAP and PKI Directory Management
  • Engineering and Integration experience with Two-factor authentication: RSA, PIV cards, custom smart card solutions, and biometric authentication.
  • Working experience deploying OCSP capabilities within a diverse and international organization
  • Experience with Enterprise Systems Architecture, engineering, and deployment


#clearance

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at or .

Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
  • PKI Systems Engineer

    4 weeks ago


    Springfield, Illinois, United States SAIC Full time

    PKI Systems Engineer OpportunityThis is an exciting opportunity for a highly skilled PKI Systems Engineer to join the SAIC team and support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program.Key Responsibilities:Drafting policy documents and applying NIST rev.4 controls to PKI systemsDeveloping and updating systems...


  • Springfield, Illinois, United States Apex Systems Full time

    Job Title: Senior PKI Systems EngineerApex Systems is seeking a highly skilled Senior PKI Systems Engineer to support the Department of State. As a key member of our team, you will be responsible for designing, installing, configuring, and maintaining Public Key Infrastructure (PKI) systems on-prem and in the cloud.Responsibilities:Perform all aspects of...


  • Springfield, Illinois, United States Apex Systems Full time

    Job Summary:Alex Systems is seeking a highly skilled Senior PKI Systems Engineer to support the Department of State. The successful candidate will be responsible for designing, installing, configuring, and maintaining Public Key Infrastructure (PKI) systems on-prem and in the cloud.Key Responsibilities:Perform all aspects of systems design and PKI...


  • Springfield, Illinois, United States Apex Systems Full time

    Job SummaryAlex Systems is seeking a highly skilled Senior PKI Systems Engineer to support the Department of State. The ideal candidate will have a strong background in designing, installing, configuring, and maintaining Public Key Infrastructure (PKI) systems.Key ResponsibilitiesDesign and implement PKI systems to support various government agencies.Manage...

  • PKI Systems Engineer

    5 months ago


    Springfield, United States SAIC Full time

    DescriptionThe Vanguard 2.2.1 contract provides enterprise IT services to the Department of State (DOS) Diplomatic Technology Bureau. The contract currently has an opening for a Senior Public Key Infrastructure (PKI) system engineer. As a Senior PKI Engineer, you will be joining the team to participate and lead in managing, securing, engineering, and...


  • Springfield, Illinois, United States SAIC Full time

    Job SummaryThe Vanguard 2.2.1 contract is seeking a Senior Public Key Infrastructure (PKI) system engineer to join the team. This role involves managing, securing, and engineering DOS's key and certificate management services, including supporting robust, enterprise-grade PKI systems. The responsibilities include systems design, PKI engineering, maintaining...


  • Springfield, Illinois, United States SAIC Full time

    This exciting opportunity at SAIC is for a Senior Cybersecurity Engineer with expertise in PKI configuration management to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. The successful candidate will provide transparent security services in support of the Department's goals to secure communications among Department...


  • Springfield, Illinois, United States SAIC Full time

    Job Summary:This is a mid-level PKI configuration management and engineering position focused on systems accreditation and authorization per NIST within the Vanguard 2.2.1 program.The preferred candidate must possess good system engineering background and expertise in Systems Authorization and Accreditation (A&A), and NIST Additionally, the preferred...


  • Springfield, United States SAIC Full time

    DescriptionThe DOS-Systems Integrity Division support team currently has an opening for a Security Systems Engineer to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. This program provides transparent security services in support of the Department’s goals to secure communications among Department staff and systems....


  • Springfield, Illinois, United States Apex Systems Full time

    Job#: Job Overview: Apex Systems is in search of a Senior Public Key Infrastructure (PKI) Specialist to provide support for a critical government program. Position: Senior PKI Specialist Work Arrangement: Fully onsite Working Hours: Monday to Friday, 3PM-11PM Employment Type: Contract role with potential for extension Compensation: $150,000...


  • Springfield, United States SAIC Full time

    Description The DOS-Systems Integrity Division support team currently has an opening for a Policy Writer to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. This program provides transparent security services in support of the Department's goals to secure communications among Department staff and systems. The position...


  • Springfield, Illinois, United States Zoom Corporation Full time

    About the RoleWe are seeking an experienced Senior Product Security Engineer to join our team at Zoom Corporation. As a key member of our engineering security team, you will be responsible for designing and implementing secure solutions, leading security initiatives, and addressing evolving privacy and security challenges, particularly in AI and machine...


  • Springfield, Illinois, United States Zoom Corporation Full time

    About the RoleWe are seeking an experienced Senior Product Security Engineer to join our team at Zoom Corporation. As a key member of our security team, you will be responsible for designing and implementing secure solutions, leading security initiatives, and addressing evolving privacy and security challenges, particularly in AI and machine learning...


  • Springfield, United States Entegee Full time

    Job DescriptionJob DescriptionRequirements:Bachelor's degree in Computer Science or Electrical Engineering.Proficiency in C/C++ programming languages.Minimum of 5 years of experience in embedded software development.Experience developing embedded software on ARM-based processors.Strong understanding of network socket programming and VLAN...


  • Springfield, Virginia, United States Allen Integrated Solutions LLC Full time

    Job Summary: We are seeking an experienced professional with expert level knowledge of high performance computing to define requirements and assess potential technologies for developing a platform that must work at multiple security levels. This is a fast-paced and dynamic work environment where the full systems engineering lifecycle is performed. The ideal...


  • Springfield, Virginia, United States Amentum Full time

    Job SummaryAs a Senior Integration Specialist at Amentum, you will play a critical role in supporting a National Security mission to position NGA as the enterprise and community GEOINT data provider. You will work with talented developers and colleagues, gaining exposure to industry best practices such as AWS cloud solutions, continuous integration/delivery,...


  • Springfield, Virginia, United States Amentum Full time

    Job Summary:As a Senior Integrations Specialist at Amentum, you will play a critical role in supporting a National Security mission to position NGA as the enterprise and community GEOINT data provider. Your expertise will be instrumental in improving the way analysts, customers, and end users access, discover, stage, link, produce, re-integrate, and deliver...


  • Springfield, Virginia, United States Entegee Full time

    Job SummaryWe are seeking a highly skilled Embedded Software Developer to join our team at Entegee. As a key member of our engineering team, you will be responsible for designing and implementing embedded software solutions using C/C++ on ARM-based processors.Key Responsibilities:Develop and implement embedded software solutions using C/C++ (C++14 and above)...


  • Springfield, Virginia, United States Entegee Full time

    Job OverviewEntegee is a leading innovator in custom automation projects, providing cutting-edge solutions in the world of controls and robotic systems. Our team is committed to exceptional performance and growth, and we're looking for a skilled Embedded Controls Systems Developer Specialist to join our team.CompensationOur competitive salary ranges from...


  • Springfield, United States VAE, Inc. Full time

    Job DescriptionJob DescriptionOVERVIEW:VAE, Inc. is a full service IT Infrastructure Solutions Company focused on building, securing and supporting our clients’ mission critical enterprises. We provide a distinctive array of design, integration and implementation services as well as fully managed service offerings. VAE is at the forefront of leveraging...