Senior Cyber PKI & HSM Administrator

SHR Consulting Group; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company contribution

PTO + federal holidays

Certification reimbursement

Job summary

SHR Consulting Group, LLC is seeking a Cyber PKI Administrator to install, configure, and maintain HSMs and PKI services for a DISA environment. You will manage certificates, CAC integration, and two-person authorization while ensuring compliance with DoD STIGs and IAVA.

The role requires on-site work at government facilities in the NCR, with shift rotations as needed and a focus on secure cryptographic operations.

Qualifications

• Hands-on PKI administration in a Windows AD environment.
• Experience with HSMs and FIPS 140-2/140-3 requirements.
• Cryptographic key lifecycle management knowledge.
• Proficient with Windows Server OS (2016/2019/2022), AD, Group Policy, PowerShell.
• Ability to apply DoD STIGs and IAVA for compliance.
• Ability to operate under strict two-person integrity.

Responsibilities

• Operate PKI, OCSP responders, and CRL services across domains.
• Manage HSMs: install, configure, update firmware, monitor health.
• Oversee root and policy CA lifecycle events and key ceremonies.
• Support CAC integration and PKI for government personnel.
• Ensure audit logs, change control, and RMF artifacts are maintained.
• Collaborate with cross-functional teams for compliant PKI services.

Skills

PKI administration

HSM administration

Active Directory / Windows Server

PowerShell scripting

OCSP/CRL management

DoD compliance (STIGs/IAVAs)

Two-person integrity / separation of(d

Education

Bachelor's degree in Computer Science or related field

Tools

Thales Luna HSM

Active Directory Certificate Services (AD CS)

Nessus/ACAS vulnerability tooling

VMware

Microsoft IIS

Job description

SHR Consulting Group, LLC is seeking a Cyber PKI Administrator to install, configure, and maintain HSMs and PKI services for a DISA environment. You will manage certificates, CAC integration, and two-person authorization while ensuring compliance with DoD STIGs and IAVA.

The role requires on-site work at government facilities in the NCR, with shift rotations as needed and a focus on secure cryptographic operations.