Senior Cyber PKI & HSM Admin – DoD, Onsite NCR

SHR CONSULTING GROUP, LLC; Arlington (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company contribution

Paid time off

Certification reimbursement

Life and disability insurance

Job summary

SHR Consulting Group, LLC is seeking a Cyber PKI Administrator to install, configure, and maintain PKI and HSM services supporting a DISA environment. You will manage certificate authorities, OCSP, and CA lifecycle across multiple domains, ensuring compliance with DoD standards.

The role requires experience with HSMs, PKI, and Windows AD CS, plus the ability to operate under two-person integrity and audit controls. Local Arlington, VA onsite work is required.

Qualifications

• Hands-on experience administering enterprise PKI in Windows AD environments.
• Experience with HSMs and FIPS 140-2/140-3 requirements.
• Experience with cryptographic key lifecycle management and CA operations.
• Ability to apply DoD STIGs & IAVAs to maintain compliance.
• Ability to work under two-person integrity and audit controls.

Responsibilities

• Install, configure, and maintain HSM appliances per DoD baselines and SOPs.
• Manage HSM health, updates, and client software upgrades.
• Oversee PKI CA operations, OCSP, and CRL across domains.
• Coordinate certificate issuance, renewal, and expiration tracking.
• Manage CAC integration and certificate mapping for personnel.
• Document procedures and participate in change control.

Skills

PKI administration

HSM administration

DoD security standards

Two-person integrity

Certificate Authorities

Windows AD / AD CS

PowerShell scripting

Vulnerability management (IAVMs/STIGs)

Education

Bachelor's degree in a related field

Associate's degree + relevant experience

Equivalent DoD IT experience

Tools

Thales Luna HSM

Active Directory Certificate Services (AD CS)

VMware / IIS integration

Job description

SHR Consulting Group, LLC is seeking a Cyber PKI Administrator to install, configure, and maintain PKI and HSM services supporting a DISA environment. You will manage certificate authorities, OCSP, and CA lifecycle across multiple domains, ensuring compliance with DoD standards.

The role requires experience with HSMs, PKI, and Windows AD CS, plus the ability to operate under two-person integrity and audit controls. Local Arlington, VA onsite work is required.