PKI & HSM Administrator (Onsite, DoD)

SHR Consulting Group; Arlington (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company contribution

Paid time off & federal holidays

Certification reimbursement & training

Job summary

SHR Consulting Group, LLC seeks a Cyber PKI Administrator (HSM) to support a DISA environment in Arlington, VA. You will install, configure, and maintain HSM appliances and PKI services that protect DoD identity, authentication, and encryption.

The role enforces two-person integrity, supports certificate lifecycle activities and key ceremonies, and ensures compliance with STIGs, IAVAs, RMF/A&A across classification domains. On-call/shift flexibility may be required.

Qualifications

• Hands-on PKI administration in Windows AD with CA/OCSP/CRL
• “HSM” appliances experience and DoD compliance
• Experience with PKI lifecycle management, certs, and key ceremonies
• Knowledge of STIGs, IAVAs, RMF, A&A artifacts
• DoD or Federal government IT environment experience

Responsibilities

• Install, configure, and maintain HSM appliances per vendor and DoD baselines
• Monitor HSM health, performance, and availability; troubleshoot issues
• Perform firmware updates, patches, and client software upgrades per IAVM and maintenance windows
• Maintain configuration documentation, baselines, and change logs
• Manage HSM partitions, roles, and quorum authentication
• Oversee key lifecycle: generation, backup, escrow, restoration, destruction
• Plan and execute key ceremonies for Root/Issuing CA
• Maintain tamper-evident packaging and logs
• Operate PKI components (CA, OCSP, CRL) across domains
• Issue/renew/revoke PKI certificates for DoD/NSS and other infra

Skills

PKI administration

HSM administration

Windows AD CS

PowerShell scripting

DoD STIGs & IAVAs

CAC/Smart Card integration

Two-person integrity

Vulnerability management

Education

Bachelor's degree in CS/CE/IT

DoD 8570 Baseline Certification (IAT II)

Thales Luna HSM Professional Engineer certification desired

Tools

Thales Luna HSM

VMware

Microsoft IIS

F5

Job description

SHR Consulting Group, LLC seeks a Cyber PKI Administrator (HSM) to support a DISA environment in Arlington, VA. You will install, configure, and maintain HSM appliances and PKI services that protect DoD identity, authentication, and encryption.

The role enforces two-person integrity, supports certificate lifecycle activities and key ceremonies, and ensures compliance with STIGs, IAVAs, RMF/A&A across classification domains. On-call/shift flexibility may be required.