Bachelor's degree with 9+ years or Master's degree with 7+ years of relevant experience; additional experience may substitute for degree.
Strong MS-Windows Server administration and maintenance skills.
Familiarity with PKIs, LDAP directories, HSMs, and security practices.
Excellent oral and written communication skills.
Proficient analytical and troubleshooting abilities.
Hands-on experience with Entrust PKI products in a government context.
Experience with directory products like LDAP and network device configuration.
Responsibilities
Provide PKI engineering support for various systems at the Department of State.
Manage and maintain server hardware, storage, switches, and operating systems.
Collaborate with customers to analyze requirements and deploy security solutions.
Conduct problem analysis to prevent service issues from recurring.
Perform product evaluations and make recommendations.
Identify security risks and suggest mitigations.
Develop test cases and evaluation reports for stakeholders.
Update systems documentation including operating procedures and architecture documents.
Benefits
Opportunity to work on high-impact projects within the Department of State.
Engagement in a senior-level role with significant responsibilities.
Collaboration with a skilled team in a government setting.
Potential for professional growth and development in PKI technologies.
Full Job Description
Job Description
The Enterprise & Mission Solution Business Unit currently has an opening for a Public Key Infrastructure (PKI) Systems Engineer to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. This program provides transparent security services in support of the Department's goals to secure communications among Department staff and systems. The position falls under the "Vanguard 2.2.1" contract.
This is a senior-level PKI engineering position within the Vanguard 2.2.1 program's Enterprise Engineering Office (EEO), providing PKI engineering and integration support, administering, maintaining, and deploying various PKI systems based on Entrust solutions, onsite at the various DoS Datacenters and at certain selected DoS domestic and overseas locations. The preferred candidate must possess strong skills in designing, installing, configuring, and maintaining PKI systems. Additionally the preferred candidate should have some experience in providing tier-3 level support in large enterprises.
This role requires at least 4 days/week onsite in Springfield, VA.
Description of Duties:
Providing PKI engineering support in the operation of a number of PKI systems deployed at the Department of State.
Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs).
Directly working with customer to analyze requirements and then deploy security related solutions to meet those requirements.
Providing problem analysis following any service issues to prevent recurrence
Performing product evaluations and making product recommendations
Identifying security risks to systems and suggest mitigations
Developing test cases for software/hardware testing and developing test evaluation reports for stakeholders.
Developing and updating systems documentation (e.g., ConOps, Operating procedures, systems architecture documents)
Qualifications
Required Education/Experience:
Bachelor's degree and 9+ years of relevant work experience; Master's degree and 7+ years of relevant work experience; may accept additional experience in lieu of degree.
Excellent MS-Windows Server administration & maintenance
Familiarity with PKIs and related technologies (LDAP directories, HSMs, OCSP) and security practices
Excellent oral and written communication skills
Excellent analytical and troubleshooting skills
Working knowledge of Entrust suite of PKI products (Security Manager, Administration Services, Security Manager Proxy) especially in a government setting.
Hands-on experience with Hardware Security Modules (HSMs)
Experience with directory products (LDAP), such as Critical Path or Active Directory
CISSP, Security+, or similar certification
Network device configuration - Cisco and Juniper firewalls and switches
Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
Virtualization technologies (ESX/ESXi)
Working knowledge of External storage solutions
Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.
Required Clearance:
US Citizenship.
Ability to obtain top secret clearance. Must obtain interim top secret prior to starting work.
Desired Experience/Skills/Attributes:
Working knowledge of Entrust suite of PKI products (Security Manager, Administration Services, Security Manager Proxy) especially in a government setting.
Hands-on experience with Hardware Security Modules (HSMs)
Experience with directory products (LDAP), such as Critical Path or Active Directory
CISSP, Security+, or similar certification
Network device configuration - Cisco and Juniper firewalls and switches
Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
Virtualization technologies (ESX/ESXi)
Working knowledge of External storage solutions
Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.
About SAIC
Science Applications International Corporation (SAIC) is a technology integrator in the technical, engineering, intelligence, and enterprise information technology markets. SAIC has approximately 26,000 employees and operates in more than 70 countries. The company was founded in 1969 and is headquartered in Reston, Virginia. SAIC provides services to the U.S. government, including the Department of Defense, the intelligence community, and civilian agencies. The company also serves commercial customers in the healthcare, energy, and financial services sectors.