PKI Certificate Authority Engineer II

Job Description

OverviewThe PKI Certificate Authority Engineer is required to be certified at the expert level in multiple disciplines of systems and security (e.g. MCSE & CISSP). The engineer provides expert level engineering support for all Public Key Infrastructure services. A PKI Certificate Authority Engineer supports Enterprise-class infrastructure in the RCC-SWA by providing optimization, administration, and technical documentation of all Public Key Infrastructure systems. The engineer shall perform discovery, analysis, monitoring, and management of all digital certificates deployed by the Certificate Authority (CA). The position is a senior role, provides technical guidance, direction, and maintains overall responsibility of personnel assigned to their team. Responsible for the administration, troubleshooting and maintenance activities of all personnel assigned to the team. Establishes work schedules, maintains good order and discipline and ensures all personnel are properly trained to perform.Responsibilities

• Operate and maintain Certificate Authority Servers but not limited to databases and Hardware Security Module on NIPR, SIPR and Coalition enclaves.
• Manage the CA life cycle, including generation, revocation, expiry, and updating to determine where each certificate is installed
• Troubleshoot Active Directory Certificate Services, HSMs, Certificate Enrollment Web Services, Certificate Enrollment Policy Web Service, and Internet Information Services (IIS)
• Aid with defining and developing the strategic plan for Public Key Infrastructure (PKI), and assist with the implementation of PKI and other certificate related technologies
• Create and maintain system documentation for certificate-based technologies, including installation, configuration, and appropriate troubleshooting steps.
• Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.

Qualifications

• Education / Certifications: One-year related experience may be substituted for one year of education, if degree is required. One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelors degree in a Software Engineering or Business Information Systems discipline for three years general experience.
  • Bachelor?s Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field
  • This position requires candidates to adhere to DoD 8570.01-M.
  • All candidates are required to maintain at least one (1) Baseline Certification and one (1) Computing Environment (CE) certification.
  • Baseline Environment (BE) certifications cannot also be used as a Computing Environment (CE). The authorized certifications for this job title are listed as follows:
• IAT Level:
  • IAT III
• Baseline:
  • CISSP (or Associate), CCNP Security, CISA, CASP, GCED, GCIH, CCSP
• CE
  • X MCSE: Microsoft Certified Solutions Expert: Windows Server 2016
  • MCSE: Microsoft Certified Solutions Expert: Data Management and Analytics
  • MCSE: Microsoft Certified Solutions Expert: Productivity Solutions Expert
  • Microsoft 365 Certified: Enterprise Administrator Expert
  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft Certified: Azure Database Administrator Associate
• Experience:
  • At least five (10) years of practical experience working with MS Active Directory Domain Services, MS Active Directory Certificate Services (AD CS), Public Key Infrastructure (PKI), Cryptography Standards , managing keystores (JKS, JCEKS, PKCS #12, Windows MSCS) and trust stores, hardware security modules (HSMs) and key management services (KMS), Online Certificate Status Protocol (OCSP), Two-factor authentication: RSA, Smartcards(CAC). Understanding of FIPS 140-2 compliance and Standard Technical Implementation Guides (STIGs)
  • Experience with a customer service-oriented company
• Skills & Technology Used:
  • Ability to troubleshoot servers and infrastructure equipment, assess networking requirements and provide solutions, and make accurate and independent decisions under pressure
  • Excellent organizational, interpersonal, written, and verbal communication skills
  • Ability to perform comfortably in a fast-paced, deadline-oriented work environment and to successfully execute many complex tasks simultaneously
  • MS Active Directory Domain Services
  • MS Active Directory Certificate Services (AD CS)
  • Public Key Infrastructure (PKI)
  • Cryptography Standards
  • JKS, JCEKS, PKCS #12, Windows MSCS
• Supervisory/Budgetary Responsibilities:
  • Provides technical guidance, direction, and maintains overall responsibility of personnel assigned to their team.
  • Responsible for the administration, troubleshooting and maintenance activities of all personnel assigned to the team.
  • Establishes work schedules, maintains good order and discipline and ensures all personnel are properly trained to perform

We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.

• Education / Certifications: One-year related experience may be substituted for one year of education, if degree is required. One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelors degree in a Software Engineering or Business Information Systems discipline for three years general experience.
  • Bachelor?s Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field
  • This position requires candidates to adhere to DoD 8570.01-M.
  • All candidates are required to maintain at least one (1) Baseline Certification and one (1) Computing Environment (CE) certification.
  • Baseline Environment (BE) certifications cannot also be used as a Computing Environment (CE). The authorized certifications for this job title are listed as follows:
• IAT Level:
  • IAT III
• Baseline:
  • CISSP (or Associate), CCNP Security, CISA, CASP, GCED, GCIH, CCSP
• CE
  • X MCSE: Microsoft Certified Solutions Expert: Windows Server 2016
  • MCSE: Microsoft Certified Solutions Expert: Data Management and Analytics
  • MCSE: Microsoft Certified Solutions Expert: Productivity Solutions Expert
  • Microsoft 365 Certified: Enterprise Administrator Expert
  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft Certified: Azure Database Administrator Associate
• Experience:
  • At least five (10) years of practical experience working with MS Active Directory Domain Services, MS Active Directory Certificate Services (AD CS), Public Key Infrastructure (PKI), Cryptography Standards , managing keystores (JKS, JCEKS, PKCS #12, Windows MSCS) and trust stores, hardware security modules (HSMs) and key management services (KMS), Online Certificate Status Protocol (OCSP), Two-factor authentication: RSA, Smartcards(CAC). Understanding of FIPS 140-2 compliance and Standard Technical Implementation Guides (STIGs)
  • Experience with a customer service-oriented company
• Skills & Technology Used:
  • Ability to troubleshoot servers and infrastructure equipment, assess networking requirements and provide solutions, and make accurate and independent decisions under pressure
  • Excellent organizational, interpersonal, written, and verbal communication skills
  • Ability to perform comfortably in a fast-paced, deadline-oriented work environment and to successfully execute many complex tasks simultaneously
  • MS Active Directory Domain Services
  • MS Active Directory Certificate Services (AD CS)
  • Public Key Infrastructure (PKI)
  • Cryptography Standards
  • JKS, JCEKS, PKCS #12, Windows MSCS
• Supervisory/Budgetary Responsibilities:
  • Provides technical guidance, direction, and maintains overall responsibility of personnel assigned to their team.
  • Responsible for the administration, troubleshooting and maintenance activities of all personnel assigned to the team.
  • Establishes work schedules, maintains good order and discipline and ensures all personnel are properly trained to perform

We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.

• Operate and maintain Certificate Authority Servers but not limited to databases and Hardware Security Module on NIPR, SIPR and Coalition enclaves.
• Manage the CA life cycle, including generation, revocation, expiry, and updating to determine where each certificate is installed
• Troubleshoot Active Directory Certificate Services, HSMs, Certificate Enrollment Web Services, Certificate Enrollment Policy Web Service, and Internet Information Services (IIS)
• Aid with defining and developing the strategic plan for Public Key Infrastructure (PKI), and assist with the implementation of PKI and other certificate related technologies
• Create and maintain system documentation for certificate-based technologies, including installation, configuration, and appropriate troubleshooting steps.
• Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.

Keyskills :