SITEC - PKI Systems Administrator - MacDill AFB

Peraton; Tampa (FL); On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a PKI Administrator to support the SITEC 3 Enterprise Operations and Maintenance at MacDill AFB in Florida. The role focuses on administering certificate authorities, lifecycle management, and template configuration across a multi-domain enterprise.

You will troubleshoot PKI issues, manage OCSP/CRL services, and support hardware security modules. Strong PowerShell, ADCS, and NDES experience are required, with DoD STIG compliance and strong documentation skills.

Qualifications

• Solid PKI administration and certificate lifecycle experience in multi-domain environments.

Responsibilities

• Certificate Authority Administration: Daily maintenance and support for enterprise CAs across Windows ADCS, Red Hat Linux, and Cisco ISE.
• Certificate Lifecycle Management: End-to-end issuance, renewal, revocation, and re-keying for enterprise systems and devices.
• Certificate Template Management: Configure templates for TLS/SSL, code signing, machine identity, and smart card enrollment.
• Revocation & Validation Infrastructure: Monitor OCSP and CRL infrastructure for high availability.
• HSM Operations: Health checks and maintenance of physical HSMs across data centers.
• Identity & Smart Card Support: Deploy and troubleshoot CAC and middleware including ActiveClient.
• Third-Party PKI Integrations: Update third-party validation and NDES endpoints.
• Ecosystem Integration & Troubleshooting: PKI integration across AD, Kerberos, LDAPS, and mobile management.
• Incident & Ticket Management: Resolve Tier 2/3 PKI incidents and perform root-cause analysis.
• Documentation & Compliance: Maintain SOPs and ensure DoD STIG and zero-trust compliance.

Skills

PKI Administration

Windows Server Administration

ADCS

PowerShell scripting

Certificate Authority management

OCSP/CRL infrastructure

HSM operations familiarity

Networking and TLS/SSL knowledge

Incident troubleshooting

Documentation & SOPs

Education

HS Diploma

AS/AA degree

BS/BA degree

DoD 8570.01-M IAT II

RHCSA

CCNA

MC Windows Server Hybrid Administrator

MC Identity and Access Administrator

Tools

PowerShell tooling

ADCS tooling

NDES

Windows Server management tools

Job description

Responsibilities

Peraton requires Systems Administrators to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

The Successful Enterprise Public Key Infrastructure (PKI) Administrator applicant will have the following qualifications:

The candidate needs a solid understanding of client/server, networking, and internet technology fundamentals. Additionally, the candidate needs a strong background in the daily administration, implementation, lifecycle management, and operational support of Public Key Infrastructure across a multi-domain, multi-platform enterprise environment. Further responsibilities include performing problem-solving and incident troubleshooting at the Systems Administrator level, coupled with exceptional communication and technical writing skills.

The applicant must possess demonstrated technical proficiency in Microsoft Windows Server (2019/2022), Active Directory Certificate Services (ADCS), and associated client operating systems. The position requires a firm operational background in managing hybrid Certificate Authority (CA) platforms across Windows, Red Hat Enterprise Linux, and Cisco Identity Services Engine (ISE). The candidate will support an enterprise infrastructure spanning four distinct networks, including Online Certificate Status Protocol (OCSP) responders, physical Hardware Security Modules (HSMs), and certificate distribution services supporting over 85,000 globally separated users. The successful candidate must have a strong working foundation in certificate templates, revocation software, diagnostic utilities, and automation via PowerShell.

Key Responsibilities

• Certificate Authority Administration: Perform daily administrative maintenance, monitoring, and operational support for enterprise Certificate Authorities across Windows ADCS, Red Hat Enterprise Linux, and Cisco ISE.
• Certificate Lifecycle Management: Oversee end-to-end certificate issuance, renewal, revocation, and re-keying processes for enterprise systems, network infrastructure devices, web servers, and user authentication tokens.
• Certificate Template Management: Configure, maintain, and publish certificate templates catering to a diverse enterprise environment to support TLS/SSL, code signing, machine identity, and smart card enrollment.
• Revocation & Validation Infrastructure: Monitor and maintain the enterprise Online Certificate Status Protocol (OCSP) infrastructure and Certificate Revocation Lists (CRLs), ensuring high availability and validation accuracy.
• Hardware Security Module (HSM) Operations: Assist with routine health checks, administrative monitoring, and maintenance of physical HSM appliances deployed across primary and secondary data center nodes (Node 28 and Node 15), supporting the strategic migration of all enterprise CAs behind HSM backends.
• Identity & Smart Card Support: Deploy, support, and troubleshoot third-party Common Access Card (CAC) and middleware software (including ActiveClient and 90 Meter), resolving authentication and certificate enrollment errors.
• Third-Party PKI Integrations: Maintain and update third-party certificate validation and revocation software (such as Axway/Tumbleweed) and Network Device Enrollment Service (NDES) endpoints.
• Ecosystem Integration & Troubleshooting: Ensure seamless PKI integration across Active Directory, Kerberos, LDAPS, enterprise networking, mobile device management (Hypori/MobileIron), and virtualized server environments (vSphere).
• Incident & Ticket Management: Resolve Tier 2 and Tier 3 operational PKI incident tickets, performing root-cause analysis on certificate trust issues, expired tokens, and validation failures.
• Documentation & Compliance: Maintain operational standard operating procedures (SOPs), document configuration baselines, and ensure all PKI components adhere strictly to DoD STIG and zero-trust security mandates.

Shift Work: Willingness to support shift schedules, on-call rotations, and weekend maintenance windows as required.

Qualifications

Required Qualifications:

• Min 12 years with HS Diploma, 10 years AS/AA degree, 8 years with BS/BA degree
• A DoW TS/SCI clearance is required
• DoW 8570.01-M IAT II
• Must be DoW8140 compliant under the Work Role Code 451 – System Administrator - Intermediate level or higher.
• Linux Red Hat experience is a plus.
• Practical experience in a Systems Administrator or PKI Administrator role supporting enterprise production environments.
• Hands-on experience administering Microsoft Windows Server 2019/2022 and Active Directory Certificate Services (ADCS).
• Operational experience supporting multi-platform CAs, with working knowledge of Red Hat Enterprise Linux and/or Cisco ISE.
• Familiarity with the installation, configuration, and health monitoring of OCSP responders and CRL distribution points.
• General understanding of Hardware Security Modules (HSMs) and their role in securing cryptographic root keys.
• Demonstrated experience with administrative scripting (PowerShell) for automated certificate reporting, monitoring, and maintenance.
• Solid understanding of networking protocols, TLS/SSL handshake negotiation, and authentication protocols (Kerberos, LDAPS).
• Previous experience supporting large-scale enterprise environments (supporting greater than 50,000 users).

Desired Qualifications:

• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Red Hat Certified System Administrator (RHCSA)
• VMware Certified Associate (VCA) or VMware Certified Professional (VCP)
• Cisco Certified Network Associate (CCNA)

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.