Public Key Infrastructure (PKI) Security Administrator

Tetrad Digital Integrity LLC; Falls Church (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Tetrad Digital Integrity LLC, a cybersecurity firm, is hiring a Senior PKI Security Administrator to oversee certificate lifecycle, support USPS-related certificate use, and guide a PKI team. The role focuses on automation, Venafi integration, and security administration across enterprise PKI environments.

Required are a strong PKI background, SCEP, REST API, and PowerShell scripting, with experience in AD/LDAP, and hands-on Venafi and MS CA, HSM deployments. U.S.

Qualifications

• Bachelor’s degree in IT or security with 9+ years of relevant experience.
• Solid understanding of PKI lifecycle, certificate management, and automation.
• Experience with Venafi, Microsoft CA, and HSM environments.

Responsibilities

• Perform certificate operational duties, customer support, reporting and documentation.
• Supervise PKI team, develop requirements for complex programs, and provide expert guidance to staff.
• Provide guidance and training on PKI lifecycle, processes and procedures; analyze and recommend improvements.

Skills

PKI expertise

REST API integration

SCEP knowledge

PowerShell scripting

Active Directory/LDAP

Education

Bachelor’s degree in IT/Security

Tools

Venafi

Microsoft CA

HSM

Ansible

Visual Studio Code

Job description

Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customersfrom increasing threats and vulnerabilities in this digital age. We are currently recruiting for a Senior level Public Key Infrastructure (PKI) Security Administrator. PKI enables secure communication and data exchange using public key cryptography and supports areas like: authentication, encryption and digital signatures.

RESPONSIBILITIES:

• Perform certificate operational duties, customer support, reporting and documentation
• Supervise PKI team, develop requirements for projects for complex to extremely complex programs; and provide strategic and expert advice and technical guidance, to program and project staff.
• Provide guidance and training to key stakeholders on PKI lifecycle, processes and procedures. This individual also provides detailed analysis, evaluation and recommendations for improvements, optimization development, and/or maintenance efforts for client-specific or mission critical challenges/issues
• Provide support for automating certificates with Venafi, with the knowledge of moving towards AI to support automation.
• Provide customer support for all of USPS applications / services using certificates

QUALIFICATIONS:

• Bachelor’s degree in computers or other IT, Security related majoror equivalent experience with 9+ years’ relevant experience
• Solid understanding of REST API Integration, Simple Certificate Enrollment Protocol (SCEP), and MS AD Auto-Enrollment and PKI
• Understanding of some of the following technologies: VCERT, Portable GIT, Ansible and Visual Studio Code
• Understanding of PowerShell scripting
• Infrastructure experience with one or more in any combination of the following: IT Sys Admin, Server Admin, Networking, Active Directory/LDAP, Unix/Linux or Virtualization and Access control administration
• Strong communication skills in working with IT customers, developers and system administrators
• Experience with certificate management tools (ideally Venafi, Microsoft CA and HSM)
• Experience troubleshooting digital certificate issues, with the ability to move towards AI/Automation

DESIRED QUALIFICATIONS:

• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring
• IT system administration experience (systems management, networks, firewalls) in an enterprise environment
• Infrastructure IT (Systems Administration, Network Administration Windows/Linux OS, Network Administration, Active Directory and/or Virtualization).
• Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
• Experience with Unix and Linux configuration and troubleshooting
• Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
• Experience with ServiceNow or other Change/Incident/Problem management ticketing technology
• PKI experience including hands on experience with: Certificate Authority Administration, Certificate Enrollment Web Serviceand Policy Web Service
• Demonstrated proficiency with server virtualization technologies (VMWare, HyperV)

TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.

“TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.”