TS Required - Senior PKI System Engineer
Washington, DC

Job Description

Job Description

Engineering Subject Matter Specialist. Seasoned Public Key Infrastructure Cryptography Specialist will provide policy, process and technical support to the design, mature and sustain Microsoft Certificate Services and Entrust Identity Guard credential management systems, based Public Key Infrastructure (PKI). This is a full-time position and the candidate must have strong experience in PKI, authentication/multi-factor authentication technologies, cryptographic services, data protection, IT strategy, PKI and enterprise architecture.

Duties and Responsibilities:

* Technical contributions to the development and sustainment of the credentialing environment. Experience with configuring and deploying the following technologies:
* SafeNet middleware and HSM suites
* Microsoft Windows Server 2012 Certificate Services Infrastructure (CA, CRL, AD integration)
* Entrust Entelligence Security Provider (ESP)
* Entrust Certificate Authority Services Experience in the design, install and configuring of Certificate Lifecycle Management solutions Experience providing architecture and integration support including registration, authentication, authorization, and workflow processes Experience with Federal PKI (PIV and PIV-1) issuance and FISAM LOA4 Credentialing Experience supporting system validation and operational testing Experience provide architecture and integration support leveraging current infrastructure and new cloud services.
* Must be a team player
* Works easily with internal and external team mates
* Effectively communicates to stakeholders about PKI and IdAM Other duties as assigned
* Entrust Certificate Authority Services Experience in the design, install and configuring of Certificate Lifecycle Management solutions Experience providing architecture and integration support including registration, authentication, authorization, and workflow processes Experience with Federal PKI (PIV and PIV-1) issuance and FISAM LOA4 Credentialing Experience supporting system validation and operational testing Experience provide architecture and integration support leveraging current infrastructure and new cloud services.
*

Must be a team player
* Works easily with internal and external team mates
* Effectively communicates to stakeholders about PKI and IdAM
* Other duties as assigned

Minimum Qualifications: (To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.)

* Experience maintaining a PKI following NIST 800-53, and Federal Information Processes
* Knowledge of Standards 140-2, aligned with the x.509 Federal Common Certificate Policy, and VISA certificate policy
* Experience defining certificate lifecycle management processes and procedures (e.g., registration, identity proofing, certificate request, revocation, renewal) Proficiency in the design, implementation and migration of Microsoft Certificate Services (stand-alone and AD integrated)
* Working knowledge of the operations of and all aspects of a PKI Infrastructure on both open and closed networks. This includes, but is not limited to: Certificate Issuance, Certificate Revocation, System Availability and Reporting, Certificate Validation Infrastructure (Certificate Revocation Lists-CRL distribution, Certification and Accreditation-CA signing certificate distribution, CrossCertificatePair distribution, certificate validations path processing), Directory services, HTTP services, and Hardware Security Modules, software based load balancing and Federal Information Processing Standards (FIPS) approved cryptographic modules, Secure Hash Algorithm-SHA-1, SHA-2, and Rivest, Shamir and Adleman (RSA) Cryptographic libraries and how they are used in program API's, Public Key Infrastructure, and interacting with external clients in support of PKI and directory services components.
* The majority of work performed under this task pertains to systems required to facilitate issuance and distribution of PKI credentials. Tasks are primarily focused on credential management infrastructure, PKI directories that support distribution of credentials, certificate revocation lists (CRL's), and other areas required to support the PKI issuance infrastructure.



Required Qualifications

* 8-10 years of PKI engineering operations experience.
* Bachelors DegreeExperience deploying a PKI following NIST 800-53, and Federal Information Processes Knowledge of Standards 140-2, aligned with the x.509 Federal Common Certificate Policy, and VISA certificate policy Experience defining certificate lifecycle management processes and procedures (e.g., registration, identity proofing, certificate request, revocation, renewal)
* Proficiency in the design, implementation and migration of Microsoft Certificate Services (stand-alone and AD integrated)
* Working knowledge of the operations of and all aspects of a PKI Infrastructure on both open and closed networks. This includes, but is not limited to: Certificate Issuance, Certificate Revocation,

Desired Qualifications

Salient CRGT is a leading provider of health, data analytics, cloud, agile software development, mobility, cyber security, and infrastructure solutions. We support these core capabilities with full lifecycle IT services and training-to help our customers meet critical goals for pivotal missions. We are purpose-built for IT transformation supporting federal civilian, defense, homeland, and intelligence agencies, as well as Fortune 1000 companies.

If you feel you are qualified for this position, express interest by clicking the Apply button below (if you are viewing this position on the Salient CRGT website). If you are viewing this job posting outside of the Salient CRGT website, please visit: www.salientcrgt.com/careers to express interest in this position through the Salient CRGT Careers page.

Salient CRGT is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, sexual orientation, gender identity or expression, veteran status, disability, genetic information, or any other factor prohibited by applicable anti-discrimination laws.