Identity Management Public Key Infrastructure Administrator

The Opportunity:

CACI is looking for and Identity Manger to lead the deployment management and security of our enterprise identity and high-assurance public key infrastructure. Bridge the critical gap between core directory services network endpoints and defense-grade hardware cryptography. The ideal candidate will secure and manage a robust root-of-trust framework utilizing enterprise-grade hardware security modules. Ensure all identity lifecycles directory provisioning and certificate issuance remain highly secure resilient and compliant with defense-sector standards.

Responsibilities:

• Deploy and maintain Certificate Authorities (CAs) compliant with DoW space frameworks ensuring rigorous lifecycle management of trusted roots and subordinate authorities.
• Configure maintain and manage high-assurance nCipher and Luna Hardware Security Modules (HSMs) to safeguard cryptographic keys and root materials.
• Design implement and troubleshoot complex OCSP (Online Certificate Status Protocol) responders CRL (Certificate Revocation List) distribution points and AIA (Authority Information Access) extensions to guarantee seamless certificate validation pathways.
• Manage Active Directory structures and utilize Group Policy Objects (GPOs) to enforce strict security baselines smart card login requirements and certificate auto-enrollment across the enterprise.
• Author and configure specialized certificate templates including DoW NPE Certificates for use with RDP VOIP Phones network devices and ISE-related functions.
• Facilitate secure enterprise authentication and automated enrollment processes across all corporate and production endpoints.
• Monitor PKI health metrics trust chain validity and cryptographic performance to maintain zero-downtime infrastructure.

Qualifications:

Required:

• Advanced capabilities in designing troubleshooting and enforcing complex enterprise Active Directory Group Policy Objects (GPOs).
• Proven experience operating and managing lifecycle infrastructure for Certificate Authorities specifically within the DoD Space or highly regulated federal environments.
• Direct hands-on configuration and administration experience with nCipher and Thales/Gemalto Luna HSMs for key generation storage and backup.
• Comprehensive understanding of configuring and maintaining OCSP CRL and AIA pathways for real-time validation chains.
• Strong proficiency in building deploying and managing custom enterprise certificate templates in an Department of War (DoW) environment.
• Holistic mastery of asymmetric cryptography key escrows and trust chain architecture.
• Relevant industry certifications including CISSP or CompTIA SecurityX

Desired:

• Familiarity with Federal/DoD compliance standards including STIGs NIST SP 800-53 and FIPS 140-2/3.
• Strong scripting skills (such as PowerShell) for automating certificate monitoring CRL updates or Active Directory management tasks.
  

What You Can Expect:

A culture of integrity.

At CACI we place character and innovation at the center of everything we do. As a valued team member youll be part of a high-performing group dedicated to our customers missions and driven by a higher purpose to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. Youll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together we will advance our nations most critical missions build on our lengthy track record of business success and find opportunities to break new ground in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including but not limited to geographic location Federal Government contract labor categories and contract wage rates relevant prior work experience specific skills and competencies education and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI you will receive comprehensive benefits such as; healthcare wellness financial retirement family support continuing education and time off benefits.

The proposed salary range for this position is: