Navy Certificate Validation Infrastructure System Administrator

CACI International Inc.; North Charleston (SC); On-site; USD 72,000 - 150,000; Full time

Benefits offered by this job

Flexible time off

Healthcare benefits

Professional development resources

Job summary

CACI International Inc. is seeking a Technical Lead to support the Navy Certificate Validation Infrastructure (NCVI). You will lead the delivery team, manage PKI operations, CA chains, and NAC/OCSP services across Navy CANES and tactical environments.

The role requires DoD Secret clearance, 8–10 years of IT/cybersecurity experience with PKI, and leadership abilities. You will coordinate DoD stakeholders, enforce DISA STIGs, and drive continuous improvements in secure network authentication.

Qualifications

• Active DoD Secret clearance at hire, with ability to obtain Top Secret/SCI.
• Bachelor's degree as specified in the qualifications.
• 8–10 years of experience in systems administration, network engineering, or cybersecurity, with at least 3 years in technical leadership.
• 2+ years hands-on experience in DoD/Navy PKI operations, Active Directory/LDAP, or CAC/smart card technologies.
• DoD 8570/8140 Baseline: Active IAT Level II or higher certification.
• CE certifications (RHCSA, Windows Server Hybrid Administrator, Linux+ or VMware VP) or ability to obtain within 180 days.

Responsibilities

• Oversee installation, configuration, and maintenance of Validation Authorities (VA), OCSP/CRL responders.
• Lead system administration of CANES or tactical server environments, managing secure baselines for RHEL and Windows Server.
• Manage Trust Anchor and Root/Intermediate CA chains within Navy environments.
• Coordinate PKI Audit compliance (JFHQ‑DODIN).
• Conduct and analyze ACAS vulnerability scans, apply OS patches, enforce DISA STIGs.
• Maintain backups, review security logs, and secure PKI archives per DoD standards.
• Host weekly SIPR PKI conference with DoD stakeholders; produce reports and SOPs.
• Provide knowledge base articles to ensure continuous service improvement.
• Serve as escalation point for high-priority cryptographic failures and token login outages.

Skills

Leadership

PKI operations

Network security

DoD/Navy PKI operations

Education

Bachelor's degree in Cybersecurity, Systems Engineering, Computer Science, Information Technology, or related STEM field

Tools

RHCSA

Windows Server

VMware

ACAS (Nessus)

Job description

Job Title: Navy Certificate Validation Infrastructure System AdministratorJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: RegularPercentage of Travel Required: Up to 25%Type of Travel: Continental US* * *The Opportunity:Join CACI as a Technical Lead supporting critical Navy communication, cybersecurity, and identity management programs. In this role, you will lead our technical delivery team for the Navy Certificate Validation Infrastructure (NCVI), a vital cybersecurity program that ensures secure, cryptographically validated network authentication and Cryptographic Logon (CLO) enablement across Navy afloat, submarine, and tactical/shore-based enclaves (such as CANES, ISNS, NMCI, and ONE-Net).As the NCVI Technical Lead, you will combine high-level public key infrastructure (PKI) systems engineering with direct operational team management. You will serve as the principal liaison to our government clients at the Naval Information Warfare Center Atlantic (NIWC LANT), driving PKI compliance, managing system validation processes, overseeing Local Registration Authority (LRA) functions, and coordinating response initiatives for fleet cryptographic casualties (CASREPs).Responsibilities:NCVI Systems & Cryptographic Administration:Oversee the installation, configuration, and engineering maintenance of Validation Authorities (VA), validation servers, and Online Certificate Status Protocol (OCSP) / Certificate Revocation List (CRL) responders.Lead system administration (hardware, OS, and network virtualization) of hosting systems within Consolidated Afloat Networks and Enterprise Services (CANES) or tactical server environments, managing secure baselines for Red Hat Enterprise Linux (RHEL) and Windows Server instances.Manage Trust Anchor and Root/Intermediate Certificate Authority (CA) chains (including DISA, NSS, and DoD-approved External CAs) within Navy environments.Audit, Compliance & Security Support:Coordinate and track Joint Force Headquarters Department of Defense Information Network (JFHQ-DODIN) PKI Audit compliance.Conduct and analyze ACAS (Nessus) vulnerability scans, apply operating system patches, and enforce DISA Security Technical Implementation Guides (STIGs) across the NCVI infrastructure.Maintain system backups, review workstation security logs, and secure PKI archives in accordance with DoD standards.Fleet Reporting & Knowledge Management:Host and drive weekly SIPR PKI conference and data calls with DoD stakeholders to address systemic validation issues.Produce daily operational reports, fleet security bulletins, Standard Operating Procedures (SOPs), and technical knowledge base articles to ensure continuous service improvement.Support the fleet as the ultimate technical escalation point for high-priority cryptographic failures and token login outages.Qualifications:Required:Clearance: Active DoD Secret security clearance at the time of hire, with the ability to obtain and maintain a Top Secret/SCI clearance.Education: Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Information Technology, or a related STEM field. An equivalent combination of technical military training, Associate's degree, and progressive IT experience may be considered in lieu of a degree.Minimum of 8–10 years of experience in systems administration, network engineering, or cybersecurity, with at least 3 years executing technical leadership, team management, or lead engineering tasks.Minimum of 2 years of hands-on experience in DoD/Navy PKI operations, directory services (Active Directory/LDAP), or Common Access Card (CAC) / smart card enabling technologies.DoD 8570/8140 Baseline: Active IAT Level II baseline certification (e.g., CompTIA Security+ CE, GSEC, SSCP) or higher.Computing Environment (CE): A professional computing environment certification (e.g., RHCSA, Microsoft Certified Windows Server Hybrid Administrator, Linux+, or VMware Certified Professional) or the ability to obtain one within 180 days of hire.-What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.Pay Range :There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.The proposed salary range for this position is:$71,500 - $150,200CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.