Job Title: Senior Public Key Infrastructure (PKI) Engineer
Location: Reston, VA (Hybrid)
Duration: 12 Months
 
Job Description:
Company Overview:

• Since 1898, Client has helped customers complete more than 25,000 projects in 160 countries on all seven continents that have created jobs, grown economies, improved the resiliency of the world's infrastructure, increased access to energy, resources, and vital services, and made the world a safer, cleaner place.
• Differentiated by the quality of our people and our relentless drive to deliver the most successful outcomes, we align our capabilities to our customers’ objectives to create a lasting positive impact.
• We serve the Infrastructure; Nuclear, Security & Environmental; Energy, and Mining & Metals markets. Our services span from initial planning and investment, through start-up and operations. Core to Client are our values – ethics, safety, quality, people, culture, relationships, innovation and sustainability, and our covenants – integrity, respect, collaboration, trust, and delivery. They are what we believe, what customers can expect, and how we deliver.

 
What you’ll do:

• Client’s Information Systems & Technology organization is seeking a Senior Public Key Infrastructure (PKI) Engineer to support the architecture, implementation and operations of enterprise level PKI as part of the identity and access management team. This role will focus on building and maintaining certificate lifecycle management systems, including issuance, renewal, revocation and auditing of the certificates and keys; developing strategies for disaster recovery; offering technical support to users; and ensuring compliance with regulations and policies.
• This is an excellent opportunity to work as an SME for Private and Public Key Infrastructure with a wide variety of technologies in a fast-paced global environment. In this role you will leverage a strong understanding of PKI to quickly adapt to the environment and make an impact. The role works collaboratively within a team of Identity Engineers following global processes, performing and/or assisting with core job responsibilities including:
•  Overall security, reliability, and management of PKI

• Experience deploying or maintaining Active Directory Certificate Services, GlobalSign, Sectigo, Digicert, Keyfactor, OpenSSL or other certificate management platforms.
• Firm understanding of and configuring Online Certificate Status Protocol (OCSP), Certificate Authorities (CA), Registration Authorities (RA), Certificate Revocation List (CRL), Bring Your Own Key (BYOK)
• Firm understanding of cryptographic concepts including symmetric/asymmetric cryptography, hash algorithms, digital signatures, encryption, etc.
• Comprehensive understanding of the PKI/HSM ecosystem, including technology, standards, implementations, and migration strategies.
• Ensure digital certificate services provided align with Client’s and industry best practices.
• Support, implement and design PKI cross functional integrations:
• Installation of SSL certificates in Windows IIS, JAVA JKS, Unix/Linux, Apache, Tomcat, Azure Key vault, AWS, F5's etc.
• Understanding of ACME protocol and its functionality
• Experience with developing scripts for administrative and automation tasks
• Provide guidance, educate key stakeholders on certificate life cycle processes and procedures.
• Working closely with IAM teams to implement Identity and Access Management PKI functionality for specific business and security requirements and processes.
• Collaborate with other IT and Operational teams to integrate PKI solutions with existing systems/applications
• ITSM process (Request management, change management, Incident management) on tools such as SNOW
• Monitor and troubleshoot PKI related issues
• Active Directory Certificate Services related issues
• Assist and educate users/administrator with certificate enabled applications, such as SSL/TLS, S/MIME, Code Signing, Smartcard, 802.1x, EAP-TLS, etc.
• Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.
• Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.
• Knowledge of PKI Standards, including but not limited to:
• Understanding of X.509 Certificate Management Standards
• Creating and maintaining Certificate Policy and Practice Statement (CP/CPS)
• Understanding of CA/Browser Forum Baseline Requirement

 
Basic Qualifications:

• US Citizenship Required
• Recognized degree in Computer Science or Information Technology from an accredited college or university, or specialized courses in networking, information technology, server administration and infrastructure operations, or equivalent work experience in a related field.
• Bachelor's or Master's degree (or international equivalent) and a minimum of 8 - 10 years of relevant experience or 12 - 14 years of relevant work experience in lieu of a degree
• Windows/Linux System Administration
• Relevant Microsoft certifications are also highly desirable

 
Minimum Qualifications:

• Excellent technical communication, writing, meeting facilitation and presentation skills.
• Self-driven and resourceful to achieve goals independently as well as motivate the group to deliver technical excellence and quality of service.
• Flexibility to adjust to changing requirements, schedules, and priorities
• Ability to learn and adapt to new technologies, present proof of concepts
• Time management skills with a focus on quality service and deliverables
• Ability to comprehend and effectively translate customer requirements into technical solutions
• Ability to create documentation and process diagrams for support personnel

 

 


At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. This position’s starting pay is: $51.40/hr.