PKI Systems Engineer

PKI Systems Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: None

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

The Opportunity:
CACI is seeking a candidate to provide engineering and operational support for NASA’s Identity, Credential and Access Management capabilities, specifically for the NASA Public Key Infrastructure (PKI) and related Derived Credential Management Services (DCMS).

Responsibilities:
• Deploy and maintain vendor software for Derived Credential Management in alignment with NASA’s requirements. Includes Vendor software installment, server software management, custom configuration and integration coordination.
• Coordinate / support required hardware and software dependencies including Microsoft Certificate Authority management.
• Responsible for operational oversight, including service availability and providing Tier 2 and /or 3 customer support.
• Completing functional testing for hardware / software updates, integration updates, and service enhancements.

** Location: Remote (proximity to NASA center is desired) **

Qualifications:

Required: 

• Bachelors degree in Computer Science or related field
• Five (5) years or more direct experience with PKI or Certificate Management processes / functions
• Proven working experience including installing, configuring and troubleshooting Windows based environments
• Knowledge of PKI, cryptography, certificate management technologies, best practices, and services with a focus on operations, governance, risk, and compliance
• Experience supporting application hosted on Windows IIS
• Experience with Entrust Security Manager
• Experience with Microsoft Certificate Authority
• Familiarity with certificate issuance processes for Derived certificates and mobile devices
• Ability to troubleshoot complex systems and integrations
• Experience with Tier 2 and /or 3 customer support
• Highly self-motivated and directed, with keen attention to detail

• Must be a U.S. Citizen with the ability to obtain a Public Trust investigation (Tier 2) and / or Secret Clearance.

• Current Active Clearance is desirable.

Desired:
• Experience with Intercede myID software (current vendor software)
• Experience in functional test execution for incident fixes and service enhancements
• Familiarity with PKI (Public Key Infrastructure) and HSM (Hardware Security Module) configuration as related to certificate management
• Experience with Microsoft Certificate Enrollment Policy (CEP) / Certificate Enrollment Web Services
• Experience with Microsoft Network Device Enrollment Service (NDES)
• Experience with Entrust Certificate Agent for Windows
• Experience with Entrust Certificate Agent for Mac
• Experience with HID Validation (OCSP) Responders
• Familiarity with the Simple Certificate Enrollment Protocol (SCEP)
• Prior knowledge and or ability to learn, understand, and apply NIST Security Standards documents and Federal PKI guidance (examples include FIPS 201-2, HSPD-12, NIST 800-63, NIST 800-73, NIST 800-78, NIST 800-116, NIST 800-15)
• Design and deploy new applications and enhancements to existing applications, software, and operating systems
• Conduct research on software and systems products to justify recommendations
• Create and/or maintain documentation as it relates to system configuration, mapping, processes, and service records
• Coordinate and perform in-depth tests for modified and new systems
• See potential issues and proactively ensure the highest levels of systems and infrastructure accessibility
• Experience with security monitoring and vulnerability corrections
• Communicate ideas in both technical and user-friendly language
• Work in a team-oriented, collaborative environment

-

________________________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

 

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

 

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

 

Your potential is limitless. So is ours.

Learn more about CACI here.

________________________________________________________________________________________

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

$62,800-$128,600

CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, disability, status as a protected veteran, or any other protected characteristic.