PKI Systems Engineer

SAIC; Springfield (VA); Presencial; USD 100.000 - 140.000; Jornada completa

Descripción de la vacante

SAIC is hiring a senior PKI Systems Engineer to support the Department of State's PKI program. The role involves designing, installing, configuring, and maintaining Entrust PKI deployments and HSMs across DoS data centers and overseas sites.

The candidate should have extensive PKI experience, Windows Server expertise, and strong communication skills to collaborate with customers and stakeholders in a government context.

Formación

• Minimum 5 years of relevant work experience with a Bachelor’s degree or 3 years of relevant work experience with a Master’s degree.
• Excellent MS-Windows Server administration & maintenance.
• Familiarity with PKIs and related technologies (LDAP directories, HSMs, OCSP) and security practices.
• Excellent oral and written communication skills.
• Excellent analytical and troubleshooting skills.
• Working knowledge of Entrust PKI products in government settings.
• Hands-on experience with Hardware Security Modules (HSMs).
• Experience with LDAP/Active Directory.
• CISSP, Security+ or similar certification.
• Network device configuration – Cisco and Juniper.
• TCP/IP networking and monitoring tools.
• Virtualization technologies (ESX/ESXi).
• External storage solutions knowledge.
• Strong interpersonal and collaborative skills.

Responsabilidades

• Providing PKI engineering support for PKI systems deployed at the DoS.
• Manage and maintain enclave servers, storage, switches, and HSMs.
• Collaborate with customers to analyze requirements and deploy security solutions.
• Provide problem analysis to prevent recurrence after issues.
• Perform product evaluations and make recommendations.
• Identify security risks and propose mitigations.
• Develop and update system documentation and test plans.

Conocimientos

PKI

Windows Server

HSMs

LDAP/AD

Entrust PKI

Security best practices

TCP/IP networking

Firewall config

Cisco/Juniper

Troubleshooting

Virtualization (ESX/ESXi)

External storage

Educación

Bachelor’s degree

Master’s degree

Herramientas

Entrust Security Manager

HSM management tools

Descripción del empleo

Job ID 2618069

Location Springfield, VA, US

Date Posted 2026-10-16

Category Engineering and Sciences

Subcategory Systems Engineer

Schedule Full-Time

Shift Day Job

Travel No

Minimum Clearance Required Top_Secret

Clearance Level Must Be Able to Obtain None

Potential for Remote Work ORA_ON_SITE

Description

The Enterprise & Mission Solution Business Unit currently has an opening for a Public Key Infrastructure (PKI) Systems Engineer to support the Department of State (DoS) Bureau of Information Resource Management (IRM) PKI program. This program provides transparent security services in support of the Department’s goals to secure communications among Department staff and systems. The position falls under the "Vanguard 2.2.1" contract. This is a senior-level PKI engineering position within the Vanguard 2.2.1 program’s Enterprise Engineering Office (EEO), providing PKI engineering and integration support, administering, maintaining, and deploying various PKI systems based on Entrust solutions, onsite at the various DoS Datacenters and at certain selected DoS domestic and overseas locations. The preferred candidate must possess strong skills in designing, installing, configuring, and maintaining PKI systems. Additionally the preferred candidate should have some experience in providing tier-3 level support in large enterprises.

Description Of Duties

• Providing PKI engineering support in the operation of a number of PKI systems deployed at the Department of State.
• Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs).
• Directly working with customer to analyze requirements and then deploy security related solutions to meet those requirements.
• Providing problem analysis following any service issues to prevent recurrence
• Performing product evaluations and making product recommendations
• Identifying security risks to systems and suggest mitigations
• Developing test cases for software/hardware testing and developing test evaluation reports for stakeholders.
• Developing and updating systems documentation (e.g., ConOps, Operating procedures, systems architecture documents)

Qualifications

Required Education/Experience

• Minimum 5 years of relevant work experience with a Bachelor’s degree or 3 years of relevant work experience with a Master’s degree
• Excellent MS-Windows Server administration & maintenance
• Familiarity with PKIs and related technologies (LDAP directories, HSMs, OCSP) and security practices
• Excellent oral and written communication skills
• Excellent analytical and troubleshooting skills
• Working knowledge of Entrust suite of PKI products (Security Manager, Administration Services, Security Manager Proxy) especially in a government setting.
• Hands-on experience with Hardware Security Modules (HSMs)
• Experience with directory products (LDAP), such as Critical Path or Active Directory
• CISSP, Security+, or similar certification
• Network device configuration – Cisco and Juniper firewalls and switches
• Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
• Virtualization technologies (ESX/ESXi)
• Working knowledge of External storage solutions
• Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.

Desired Experience/Skills/Attributes

• Working knowledge of Entrust suite of PKI products (Security Manager, Administration Services, Security Manager Proxy) especially in a government setting.
• Hands-on experience with Hardware Security Modules (HSMs)
• Experience with directory products (LDAP), such as Critical Path or Active Directory
• CISSP, Security+, or similar certification
• Network device configuration – Cisco and Juniper firewalls and switches
• Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
• Virtualization technologies (ESX/ESXi)
• Working knowledge of External storage solutions
• Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.

Target salary range $100,001 - $140,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.