PKI Registration Authority

Job Summary 

The PKI Registration Authority (RA) will provide critical on-site support for the Air Force Public Key Infrastructure (AF PKI) Program at a Government-leased facility in San Antonio, TX. This role involves delivering technical advice, security analysis, configuration support, and certificate lifecycle management for the Department of Defense (DoD) and Department of the Air Force (DAF) PKI systems on NIPRNet and SIPRNet. The specialist will perform RA duties, manage personnel assignments, serve as a DAF expert on key systems, and ensure compliance with DoD X.509 Certificate Policy, RA/LRA Certificate Practice Statement (CPS), National Security System (NSS) Registration Practice Statement (RPS), and other governing policies. This position requires a detail-oriented professional with expertise in digital certificate management and a commitment to operational excellence. 

Job Duties 

• On-Site RA/LRA Support: Provide on-site technical advice, security analysis, configuration support, and certificate issuance, suspension, revocation, and other duties at the Government-leased facility in San Antonio, TX, as directed by the Government, in accordance with DoD X.509 Certificate Policy, CPS, RPS, and related policies for NIPRNet and SIPRNet. 
• DAF RA Responsibilities: Perform DAF RA duties, including issuing an average of 850-900 certificates monthly, revoking 8,000 certificates monthly, processing/supporting 40-50 Alternate Trusted Agent (Alt TA) requests, 70-80 new LRA requests, and 3-5 organization box requests monthly; conduct certificate key recoveries as a Key Recovery Agent (KRA); build and maintain Standard Operating Procedure (SOP) documents; support associated meetings; and collaborate with other DoD Services and Agencies. 
• Operational Staffing: Staff RA normal operations Monday through Friday, 0700-1600 Central Standard Time (CST), and respond to Government-identified emergencies after hours (before 0700 or after 1600 CST) or on weekends as required. 
• Response Time Compliance: Ensure response time for all support requests is within three days of receipt 80% of the time and within five days 95% Contracting Government RA approval for delays, notifying the Government RA and Contracting Officer Representative (COR) of outcomes and extenuating circumstances impacting timelines. 
• Certificate Lifecycle Management: Integrate certificate lifecycle management tools to streamline certificate operations and enhance efficiency. 
• System Expertise: Serve as a DAF expert for DoD Non-Person Entity (NPE) topics, Alternate Token Issuance and Maintenance System (ATIMS), Token Management System (TMS), and Integrated Logistics System (ILS), utilizing these systems in daily operations. 
• Personnel and Audit Oversight: Manage and monitor DAF RAs, LRAs, Trusted Agents (TAs), and Alt TAs worldwide, creating and removing personnel assignments, ensuring compliance with DoD, DAF, and applicable policies, and preparing/overseeing RA/LRA/TA/Alt TA DoD/DAF audits. 

Required Qualifications 

• PKI Experience: Demonstrated experience with DoD and DAF PKI systems, including certificate issuance, renewal, revocation, and key recovery processes. 
• Policy Knowledge: Familiarity with DoD X.509 Certificate Policy, RA/LRA CPS, NSS RPS, and other governing policies for NIPRNet and SIPRNet certificate registration. 
• System Proficiency: Proficiency in ATIMS, TMS, ILS, and NPE systems, with the ability to apply them in operational tasks. 
• Organizational Skills: Strong ability to develop and maintain SOPs, manage personnel assignments globally, and prepare for DoD/DAF audits. 
• Response Capability: Proven ability to meet strict response time requirements (3 days 80%, 5 days 95%) and handle emergency support outside normal hours. 
• Security Clearance: Must possess or be eligible to obtain and maintain a minimum Secret clearance, with all employees cleared to at least Secret by the contract start date of June 1, 2025. 
• Location and Availability: Ability to work full-time on-site at the Government-leased facility in San Antonio, TX, with access to RA workstations and SIPRNet, and flexibility for after-hours/weekend emergency support as required. 
• Education: Bachelor’s degree in related field. 

Preferred Qualifications 

• Security Clearance: Active Top Secret (TS) or Top Secret /Secure Compartmented Information (TS/SCI) clearance. 
• RA/LRA/KRA Experience: Prior experience as an RA, LRA, or Key Recovery Agent within DoD or DAF PKI environments, enhancing operational expertise. 
• Audit Expertise: Knowledge of DoD and DAF audit processes, with experience supporting or overseeing RA/LRA/TA/Alt TA audits. 
• Collaboration Skills: Background collaborating with multiple DoD Services and Agencies, improving inter-agency coordination. 
• Certifications: Relevant certifications such as CompTIA Security+, CISSP, or DoD 8570/8140-approved Information Assurance certifications (e.g., IAT Level II or higher). 
• Technical Proficiency: Advanced skills in certificate lifecycle management tools and processes, optimizing PKI operations.