ECS is seeking a
Senior PKI Security Administrator to work
remotely.
Responsibilities include:
- Support internal and external customers with certificate-related issues across USPS applications and services.
- Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
- Create reports and documentation using AI and other automation tools.
- Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
- Support certificate automation using Venafi/CyberArk TPP identifying opportunities to incorporate AI into automation efforts.
- Supervise the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff
Salary Range: $130,000-$160,000
General Description of Benefits
- Bachelor's degree in computers or other IT, Security related major; or equivalent experience
- 9+ years' relevant experience
- Ability to work independently, work in a fast-paced environment, and attention to detail
- Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.
- Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code.
- Proficiency in PowerShell scripting.
- Strong understanding of Public Key Infrastructure (PKI) including:
- Certificate Authority Administration
- Certificate Enrollment Web Service & Policy Web Service
- Active Directory Certificate Services (ADCS) monitoring
- Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.
- Strong communication skills with IT customers, developers, and system administrators.
- Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).
- Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.
- Knowledge of Post Quantum Cryptography
