Public Key Infrastructure (PKI) Security Administrator

Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. We are currently recruiting for a Senior level Public Key Infrastructure (PKI) Security Administrator. PKI enables secure communication and data exchange using public key cryptography and supports areas like: authentication, encryption and digital signatures.

RESPONSIBILITIES:

• Perform certificate operational duties, customer support, reporting and documentation
• Supervise PKI team, develop requirements for projects for complex to extremely complex programs; and provide strategic and expert advice and technical guidance, to program and project staff.
• Provide guidance and training to key stakeholders on PKI lifecycle, processes and procedures.  This individual also provides detailed analysis, evaluation and recommendations for improvements, optimization development, and/or maintenance efforts for client-specific or mission critical challenges/issues
• Provide support for automating certificates with Venafi, with the knowledge of moving towards AI to support automation.
• Provide customer support for all of USPS applications / services using certificates

QUALIFICATIONS:

• Bachelor’s degree in computers or other IT, Security related major or equivalent experience with   9+ years’ relevant experience
• Solid understanding of REST API Integration, Simple Certificate Enrollment Protocol (SCEP), and MS AD Auto-Enrollment and PKI
• Understanding of some of the following technologies: VCERT, Portable GIT, Ansible and Visual Studio Code
• Understanding of PowerShell scripting
• Infrastructure experience with one or more in any combination of the following: IT Sys Admin, Server Admin, Networking, Active Directory/LDAP, Unix/Linux or Virtualization and Access control administration
• Strong communication skills in working with IT customers, developers and system administrators
• Experience with certificate management tools (ideally Venafi, Microsoft CA and HSM)
• Experience troubleshooting digital certificate issues, with the ability to move towards AI/Automation

DESIRED QUALIFICATIONS: 

• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring
• IT system administration experience (systems management, networks, firewalls) in an enterprise environment
• Infrastructure IT (Systems Administration, Network Administration Windows/Linux OS, Network Administration, Active Directory and/or Virtualization).
• Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
• Experience with Unix and Linux configuration and troubleshooting
• Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
• Experience with ServiceNow or other Change/Incident/Problem management ticketing technology
• PKI experience including hands on experience with: Certificate Authority Administration, Certificate Enrollment Web Service and Policy Web Service
• Demonstrated proficiency with server virtualization technologies (VMWare, HyperV)

TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.

“TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.”