Public Key Infrastructure Subject Matter Expert

Job Title: Public Key Infrastructure Subject Matter Expert

Location – San Antonio, TX / Hybrid

Degree - BA/BS

Experience - 10 years

Clearance - Secret

Summary of Position

The Public Key Infrastructure (PKI) Subject Matter Expert (SME) will provide specialized technical and programmatic support to the Air Force PKI System Program Office (SPO) in sustaining and modernizing enterprise PKI services that enable secure Air Force operations across classified and unclassified networks. The PKI SME will ensure that Air Force cryptographic and identity services remain fully aligned with DoD Public Key Infrastructure (DoD PKI), Identity, Credential, and Access Management (ICAM), and Zero Trust Architecture (ZTA) objectives.

Essential Job Requirements

• Evaluate current PKI and cryptographic policies, emerging standards, and cybersecurity trends affecting DoD and Air Force enterprise identity and trust services.
• Provide technical and programmatic expertise for Air Force PKI initiatives, including enterprise Certificate Authority (CA) operations, Hardware Security Module (HSM) sustainment, and integration with Active Directory and ICAM frameworks.
• Conduct gap and capability analyses to assess PKI readiness, identify cryptographic deficiencies, and recommend modernization or policy improvements supporting FIPS 140-3 and DoDI /03 compliance.
• Review and interpret DoD and Air Force cybersecurity doctrine, PKI policy, and ICAM implementation plans; document interoperability challenges and develop actionable recommendations for SPO leadership.
• Assist HQ and MAJCOM stakeholders in developing and coordinating Air Force positions on PKI-related policy, Zero Trust authentication, and enterprise encryption initiatives.
• Research and evaluate emerging PKI, post-quantum cryptography (PQC), and digital certificate management technologies to inform updates to Air Force directives (AFIs, AFMANs, and Technical Orders).
• Manage and issue digital certificates and tokens (NIPRNet, SIPRNet, and role-based credentials) for executive users, mission systems, and secure device-to-device communications supporting AFNet operations; maintain code-signing, encryption, and authentication certificates for system access and secure application operations.
• Respond to PKI service requests, configuration changes, and incident tickets; troubleshoot PKI-related technical issues, perform root cause analysis, and coordinate resolutions with Tier II/III support and system owners.
• Integrate PKI capabilities into enterprise and mission systems, ensuring proper implementation of X.509 certificates, TLS, and cryptographic controls for authentication, encryption, and signing.
• Test, configure, and deploy CA, HSM, OCSP, and RA software and hardware updates across development, test, and production environments in accordance with Air Force change management procedures.
• Maintain expertise in DoD and Air Force infrastructure, ensuring PKI interoperability with DISA, DMDC, and service-level identity management systems.
• Develop and maintain tracking systems and configuration documentation for PKI service requests, system changes, and technical resolutions.
• Demonstrate deep understanding of Common Access Card (CAC), SIPRNet Token, and cryptographic middleware characteristics, hardware, and issuance processes.
• Exhibit advanced knowledge of cryptographic system design, key management, and DoD cybersecurity policy as it applies to PKI and certificate services.
• Communicate effectively with Air Force leadership, SPO engineers, and external partners, preparing technical briefings, reports, and policy updates.
• Engage with senior DoD decision-makers to provide PKI status updates, risk assessments, and policy alignment briefings.
• Must possess or be eligible to obtain and maintain a Secret clearance

Required Education

• Bachelor's or Master's degree preferred.
• IAT Level II or higher certification highly preferred.
• IAM Level III certification preferred.

Required Experience (10 years)

• Minimum of 10 years' experience in the Cyber, PKI, or IA community.
• Experience supporting the fielding of new PKI- or IA-related software and hardware solutions.
• Proven ability to deliver technical solutions to a wide range of complex challenges.

Required Skills

• Ability to communicate highly technical information effectively in both oral and written formats.
• Proficient in Microsoft Word and Excel.

Physical Requirements

• Standard office environment; may require occasional lifting of personal computers, files, or supplies.

Equipment Used

• Personal computers, software, and government phone systems and networks.

Security Clearance

• Active Secret clearance required.