Lead PKI Network Engineer

EOE Statement We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.

Avening Tech is seeking a Lead PKI Network Engineer to support the Marine Corps Cyber Operations Group (MCCOG) Public Key Infrastructure (PKI) contract. This role provides technical expertise for concept exploration, requirements development, implementation, and enhancement of DoD PKI and USMC capabilities, and will work out of Quantico in VA (100% onsite).

• PKI Network Operations-
• Serve as the Network SPOC, providing technical oversight and guidance to PKI Network Operations staff.
• Maintain resilient certificate issuance and revocation infrastructure across MCEN networks.
• Ensure Marine Corps PKI requirements are integrated into future DoD PKI architecture.
• Support assessments of USMC impacts from DoD PKI PMO activities, including mobile device PKI and non-person entity issuance.
• Troubleshoot and resolve PKI-related issues (certificates, tokens, infrastructure services).
• Perform user account management, PKI system backups, and disaster recovery tasks.
• Support SIPRNET Token Management System (TMS) and lead systems administration for DoN PKI.
• Training and Outreach-
• Develop and deliver PKI Tactical Training Plans and materials for garrison and tactical networks.
• Configure and maintain PKI Tactical training suites using hypervisor technology.
• Provide training courses for deploying Marines, including PKI 101, CVI, Cryptographic Logon, PKI Administration, and Troubleshooting.
• Hardware Security Module (HSM) Support-
• Develop and maintain HSM-related training plans and materials.
• Configure and operate HSM training suites and deliver courses for deploying Marines.
• Certificate Authority (CA) Support-
• Provide technical support for Microsoft Active Directory, DoD PKI, and other CA technologies.
• Deploy and configure new Certificate Authorities per DoD security standards.
• Monitor CA health, publish Certificate Revocation Lists, and perform Tier III troubleshooting.
• Develop and maintain CA disaster recovery and COOP plans.
• Certificate Validation Infrastructure (CVI) Support-
• Support CVI technologies, including OCSP, Desktop Validator, and Enterprise Validation Authority.
• Deploy and maintain CVI software and configurations across USMC networks.
• Monitor CVI health and perform Tier III troubleshooting.
• Further support as necessary in the following areas:
  Tier III PKI issues, public key enabling, configuration management, PKI system infrastructure, virtual infrastructure, SAN, server management, event management, etc.

• Bachelor's degree in a relevant field and 7+ years of professional experience in Network Operations. Additional professional or military experience may be considered in lieu of degree.
• Active DoD Top Secret clearance with SCI eligibility.
• Ability to obtain a favorable adjudication on a T5 investigation.
• DoD/NSS and Only-Locally-Trusted PKI Operations and Maintenance experience.
• Strong verbal and written communication skills.
• Experience using networked computer-based systems and the Microsoft Windows operating system.
• Ability to work independently and demonstrate strong analytical skills.
• CISSP or equivalent certification.
• Ability to motivate teams, produce quality work under tight time frames, and manage multiple projects simultaneously.
• Willingness to work a flexible schedule.
• Physical requirements:
  
  Ability to stand, walk, sit, use hands, reach, climb stairs, balance, stoop, kneel, crouch, or crawl as required.
• Ability to occasionally lift or move up to 25 pounds.

Full-Time/Part-Time:
Contingent

Travel Required:

None

Clearance Required:

Top Secret

Position Title:

Lead PKI Network Engineer

Number of Openings: 1

Exempt/Non-Exempt:
Non-Exempt

Open Date: 4/20/2026

This position is currently accepting applications.