SITEC - PKI Systems Administrator - MacDill AFB

Responsibilities Peraton requires Systems Administrators to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.  This position is located at Mac Dill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (Net Ops); maintain systems and network infrastructure; provide end user and common device support;

provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. The Successful Enterprise Public Key Infrastructure (PKI) Administrator applicant will have the following qualifications:

The candidate needs a solid understanding of client/server, networking, and internet technology fundamentals. Additionally, the candidate needs a strong background in the daily administration, implementation, lifecycle management, and operational support of Public Key Infrastructure across a multi-domain, multi-platform enterprise environment. Further responsibilities include performing problem-solving and incident troubleshooting at the Systems Administrator level, coupled with exceptional communication and technical writing skills.

The applicant must possess demonstrated technical proficiency in Microsoft Windows Server (2019/2022), Active Directory Certificate Services (ADCS), and associated client operating systems. The position requires a firm operational background in managing hybrid Certificate Authority (CA) platforms across Windows, Red Hat Enterprise Linux, and Cisco Identity Services Engine (ISE). The candidate will support an enterprise infrastructure spanning four distinct networks, including Online Certificate Status Protocol (OCSP) responders, physical Hardware Security Modules (HSMs), and certificate distribution services supporting over 85,000 globally separated users.

The successful candidate must have a strong working foundation in certificate templates, revocation software, diagnostic utilities, and automation via Power Shell.

Key Responsibilities Certificate Authority Administration:
Perform daily administrative maintenance, monitoring, and operational support for enterprise Certificate Authorities across Windows ADCS, Red Hat Enterprise Linux, and Cisco ISE.Certificate Lifecycle Management:
Oversee end-to-end certificate issuance, renewal, revocation, and re-keying processes for enterprise systems, network infrastructure devices, web servers, and user authentication tokens.

Certificate Template Management:
Configure, maintain, and publish certificate templates catering to a diverse enterprise environment to support TLS/SSL, code signing, machine identity, and smart card enrollment.

Revocation & Validation

Infrastructure: Monitor and maintain the enterprise Online Certificate Status Protocol (OCSP) infrastructure and Certificate Revocation Lists (CRLs), ensuring high availability and validation accuracy.

Hardware Security Module (HSM) Operations:
Assist with routine health checks, administrative monitoring, and maintenance of physical HSM appliances deployed across primary and secondary data center nodes (Node 28 and Node 15), supporting the strategic migration of all enterprise CAs behind HSM backends.

Identity & Smart Card Support:
Deploy, support, and troubleshoot third-party Common Access Card (CAC) and middleware software (including Active Client and 90 Meter), resolving authentication and certificate enrollment errors.

Third-Party PKI Integrations:
Maintain and update third-party certificate validation and revocation software (such as Axway/Tumbleweed) and Network Device Enrollment Service (NDES) endpoints.

Ecosystem Integration & Troubleshooting:
Ensure seamless PKI integration across Active Directory, Kerberos, LDAPS, enterprise networking, mobile device management (Hypori/Mobile Iron), and virtualized server environments (vSphere).Incident & Ticket Management:
Resolve Tier 2 and Tier 3 operational PKI incident tickets, performing root-cause analysis on certificate trust issues, expired tokens, and…