Senior PKI Systems Engineer: Enterprise Security & Deployment

SAIC; Newington (VA); On-site; USD 100,000 - 140,000; Full time

Job summary

SAIC seeks a senior PKI Systems Engineer to support the DoS IRM PKI program. You will design, install, configure, and maintain Entrust PKI systems, administer HSMs, and support large enterprise environments across multiple DoS sites.

The role requires hands-on PKI experience, Windows Server expertise, and deep security knowledge. Domestic and overseas relocations may be needed for deployment and operations.

Qualifications

• Minimum 5 years of relevant work experience with a Bachelor’s degree or 3 years with a Master’s degree.
• Excellent MS-Windows Server administration & maintenance.
• Familiarity with PKIs and related technologies (LDAP directories, HSMs, OCSP).
• Excellent oral and written communication skills.
• Excellent analytical and troubleshooting skills.
• Working knowledge of Entrust PKI products (Security Manager, Administration Services, Security Manager Proxy).
• Hands-on experience with HSMs.
• Experience with directory products (LDAP) such as Critical Path or Active Directory.
• CISSP, Security+, or similar certification.
• Network device configuration – Cisco and Juniper firewalls and switches.
• Network infrastructure diagnostics (TCP/IP, network monitoring tools).
• Virtualization technologies (ESX/ESXi).
• Working knowledge of external storage solutions.
• Interpersonal skills including collaboration and strong communications.

Responsibilities

• Providing PKI engineering support across PKI systems deployed for the Department of State.
• Manage and maintain enclave servers, storage, switches, OS, and HSMs.
• Collaborate with customers to analyze requirements and deploy security solutions.
• Perform problem analysis to prevent recurrence after service issues.
• Conduct product evaluations and provide recommendations.
• Identify security risks and propose mitigations.
• Develop test cases and evaluation reports for stakeholders.
• Prepare and update system documentation (ConOps, SOPs, architecture documents).

Skills

PKI engineering

Windows Server administration

Entrust PKI products

HSMs

LDAP/Directory services

Networking (TCP/IP)

Cisco/Juniper devices

Virtualization (ESXi)

Cybersecurity certifications

Analytical & troubleshooting

Communication skills

Education

Bachelor’s degree in related field

Master’s degree in related field

Tools

Entrust Security Manager

Entrust Administration Services

Security Manager Proxy

LDAP directories tools

Job description

SAIC seeks a senior PKI Systems Engineer to support the DoS IRM PKI program. You will design, install, configure, and maintain Entrust PKI systems, administer HSMs, and support large enterprise environments across multiple DoS sites.

The role requires hands-on PKI experience, Windows Server expertise, and deep security knowledge. Domestic and overseas relocations may be needed for deployment and operations.