Navy Certificate Validation Infrastructure System Administrator

CACI International; North Charleston (SC); On-site; USD 72,000 - 150,000; Full time

Benefits offered by this job

Top-tier benefits

Educational resources

Flexible time off

Job summary

CACI is seeking a NCVI Technical Lead to direct our PKI-enabled Navy Certificate Validation Infrastructure program, impacting secure fleet authentication across CANES, ISNS, NMCI, and ONE-Net.

You will manage a delivery team, coordinate with NIWC LANT, oversee VA/OCSP/CRL components, and ensure compliance with DISA STIGs while driving continuous improvement and readiness for fleet operations. This role requires strong PKI engineering and government-facing communication.

Qualifications

• Active DoD Secret clearance at hire, ability to obtain Top Secret/SCI.
• Bachelor’s degree in Cybersecurity, Systems Engineering, CS, IT, or related STEM; or equivalent.
• 8–10 years in systems administration, network engineering, or cybersecurity; 3+ years leading teams.
• 2+ years hands-on DoD/Navy PKI operations, directory services or CAC/smart card tech.
• DoD 8570/8140 Baseline: IAT Level II or higher.
• CE certification or equivalent (RHCSA, Linux+, VMware) within 180 days of hire.

Responsibilities

• Oversee NCVI system administration including VA/OCSP/CRL components.
• Lead CANES/tactical server environments, enforcing secure baselines (RHEL/Windows).
• Manage Trust Anchor and CA chains within Navy environments.
• Coordinate PKI audit efforts with JFHQ-DODIN and DoD stakeholders.
• Address vulnerabilities (ACAS/Nessus), apply patches, enforce STIGs.
• Maintain backups, security logs, and PKI archives per DoD standards.
• Host weekly PKI conferences with DoD, produce operational reports and SOPs.
• Serve as escalation point for cryptographic failures and token login outages.

Skills

8-10 years systems administration / IT

3+ years technical leadership

2+ years DoD/Navy PKI operations

Active DoD Secret clearance

DoD 8570/8140 IAT Level II

CAC / smart card tech familiarity

Active Directory / LDAP

Education

Bachelor’s degree in Cybersecurity or related STEM field

Tools

RHCSA

Linux+

VMware Certified Professional

Job description

Job Title: Navy Certificate Validation Infrastructure System Administrator

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 25%

Type of Travel: Continental US

* * *

The Opportunity:

Join CACI as a Technical Lead supporting critical Navy communication, cybersecurity, and identity management programs. In this role, you will lead our technical delivery team for the Navy Certificate Validation Infrastructure (NCVI), a vital cybersecurity program that ensures secure, cryptographically validated network authentication and Cryptographic Logon (CLO) enablement across Navy afloat, submarine, and tactical/shore-based enclaves (such as CANES, ISNS, NMCI, and ONE-Net).

As the NCVI Technical Lead, you will combine high-level public key infrastructure (PKI) systems engineering with direct operational team management. You will serve as the principal liaison to our government clients at the Naval Information Warfare Center Atlantic (NIWC LANT), driving PKI compliance, managing system validation processes, overseeing Local Registration Authority (LRA) functions, and coordinating response initiatives for fleet cryptographic casualties (CASREPs).

Responsibilities:

• NCVI Systems & Cryptographic Administration:
• Oversee the installation, configuration, and engineering maintenance of Validation Authorities (VA), validation servers, and Online Certificate Status Protocol (OCSP) / Certificate Revocation List (CRL) responders.
• Lead system administration (hardware, OS, and network virtualization) of hosting systems within Consolidated Afloat Networks and Enterprise Services (CANES) or tactical server environments, managing secure baselines for Red Hat Enterprise Linux (RHEL) and Windows Server instances.
• Manage Trust Anchor and Root/Intermediate Certificate Authority (CA) chains (including DISA, NSS, and DoD-approved External CAs) within Navy environments.
• Audit, Compliance & Security Support:
• Coordinate and track Joint Force Headquarters Department of Defense Information Network (JFHQ-DODIN) PKI Audit compliance.
• Conduct and analyze ACAS (Nessus) vulnerability scans, apply operating system patches, and enforce DISA Security Technical Implementation Guides (STIGs) across the NCVI infrastructure.
• Maintain system backups, review workstation security logs, and secure PKI archives in accordance with DoD standards.
• Fleet Reporting & Knowledge Management:
• Host and drive weekly SIPR PKI conference and data calls with DoD stakeholders to address systemic validation issues.
• Produce daily operational reports, fleet security bulletins, Standard Operating Procedures (SOPs), and technical knowledge base articles to ensure continuous service improvement.
• Support the fleet as the ultimate technical escalation point for high-priority cryptographic failures and token login outages.

Qualifications:

Required:

• Clearance: Active DoD Secret security clearance at the time of hire, with the ability to obtain and maintain a Top Secret/SCI clearance.
• Education: Bachelor’s degree in Cybersecurity, Systems Engineering, Computer Science, Information Technology, or a related STEM field. An equivalent combination of technical military training, Associate’s degree, and progressive IT experience may be considered in lieu of a degree.
• Minimum of 8–10 years of experience in systems administration, network engineering, or cybersecurity, with at least 3 years executing technical leadership, team management, or lead engineering tasks.
• Minimum of 2 years of hands-on experience in DoD/Navy PKI operations, directory services (Active Directory/LDAP), or Common Access Card (CAC) / smart card enabling technologies.
• DoD 8570/8140 Baseline: Active IAT Level II baseline certification (e.g., CompTIA Security+ CE, GSEC, SSCP) or higher.
• Computing Environment (CE): A professional computing environment certification (e.g., RHCSA, Microsoft Certified Windows Server Hybrid Administrator, Linux+, or VMware Certified Professional) or the ability to obtain one within 180 days of hire.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CAC I values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$71,500 - $150,200

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.