PKI Security Admin

Responsibilities for this Position

Location: Any Location / Remote

Full Part/Time: Full time

Job Req: RQ228468

Type of Requisition: Pipeline

Clearance Level Must Currently Possess: None

Clearance Level Must Be Able to Obtain: None

Public Trust/Other

Required:

MBI (T2)

Job Family: Cyber and IT Risk Management

This position will support the United States Postal Service (USPS). GDIT is seeking an experienced PKI Security Admin to join our dynamic team.

• Support internal and external customers with certificate-related issues across USPS applications and services.
• Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
• Create reports and documentation using AI and other automation tools.
• Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
• Support certificate automation using Venafi/Cyber Ark TPP identifying opportunities to incorporate AI into automation efforts.
• Supervise the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff
• Ability to work independently, work in a fast-paced environment, and attention to detail

• Bachelor's degree in computer science or related technical discipline, preferred but not required.
• NOTE:
  
  If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required.

• 9+ years of relevant experience
• Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.
• Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code.
• Proficiency in Power Shell scripting.
• Strong understanding of Public Key Infrastructure (PKI) including:
  • Certificate Authority Administration
  • Certificate Enrollment Web Service & Policy Web Service
  • Active Directory Certificate Services (ADCS) monitoring
• Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.
• Strong communication skills with IT customers, developers, and system administrators.
• Strong experience with certificate management tools, preferably Venafi/Cyber Ark, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).
• Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.
• Knowledge of Post Quantum Cryptography

• Experience with Service Now or other Change/Incident/Problem management ticketing technology
• IT system administration experience (systems management, networks, firewalls) in an enterprise environment
• Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
• Experience with Unix and Linux configuration and troubleshooting
• Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, Web Logic, Web Sphere, etc.)
• Proficiency with server virtualization technologies (VMWare, HyperV)
• Database administration (MSSQL) experience

• A+
• NET+
• SEC+
• nCSE
• Venafi/Cyber Ark Admin
• certified encryption engineer
• CCENT
• CCNA

• Ability to obtain and maintain a Public Trust clearance and successfully pass a thorough Government background screening process requiring the completion of detailed forms and fingerprinting.
• This position has a U.S. residency…