Overview:
TekWissen is a global workforce management provider headquartered in Ann Arbor Michigan that offers strategic talent solutions to our clients world-wide. Our client is a trusted engineering construction and project management partner to industry and government. Differentiated by the quality of their people and their relentless drive to deliver the most successful outcomes they align their capabilities to their customers objectives to create a lasting positive impact. Since 1898 they helped customers complete more than 25000 projects in 160 countries on all seven continents that have created jobs grown economies improved the resiliency of the worlds infrastructure increased access to energy resources and vital services and made the world a safer cleaner place.
Job Title: Senior Public Key Infrastructure (PKI) Engineer
Location: Reston VA 20190
Duration: 12 Months
Job Type: Contract
Work Type: Onsite
JOB DESCRIPTION:
What youll do:
- Clients Information Systems & Technology organization is seeking a Senior Public Key Infrastructure (PKI) Engineer to support the architecture implementation and operations of enterprise level PKI as part of the identity and access management team.
- This role will focus on building and maintaining certificate lifecycle management systems including issuance renewal revocation and auditing of the certificates and keys; developing strategies for disaster recovery; offering technical support to users; and ensuring compliance with regulations and policies.
- This is an excellent opportunity to work as an SME for Private and Public Key Infrastructure with a wide variety of technologies in a fast-paced global environment.
- In this role you will leverage a strong understanding of PKI to quickly adapt to the environment and make an impact.
- The role works collaboratively within a team of Identity Engineers following global processes performing and/or assisting with core job responsibilities including:
- Overall security reliability and management of PKI
- Experience deploying or maintaining Active Directory Certificate Services GlobalSign Sectigo Digicert Keyfactor OpenSSL or other certificate management platforms.
- Firm understanding of and configuring Online Certificate Status Protocol (OCSP) Certificate Authorities (CA) Registration Authorities (RA) Certificate Revocation List (CRL) Bring Your Own Key (BYOK)
- Firm understanding of cryptographic concepts including symmetric/asymmetric cryptography hash algorithms digital signatures encryption etc.
- Comprehensive understanding of the PKI/HSM ecosystem including technology standards implementations and migration strategies.
- Ensure digital certificate services provided align with Bechels and industry best practices.
- Support implement and design PKI cross functional integrations:
- Installation of SSL certificates in Windows IIS JAVA JKS Unix/Linux Apache Tomcat Azure Key vault AWS F5s etc.
- Understanding of ACME protocol and its functionality
- Experience with developing scripts for administrative and automation tasks
- Provide guidance educate key stakeholders on certificate life cycle processes and procedures.
- Working closely with IAM teams to implement Identity and Access Management PKI functionality for specific business and security requirements and processes.
- Collaborate with other IT and Operational teams to integrate PKI solutions with existing systems/applications
- ITSM process (Request management change management Incident management) on tools such as SNOW
- Monitor and troubleshoot PKI related issues
- Active Directory Certificate Services related issues
- Assist and educate users/administrator with certificate enabled applications such as SSL/TLS S/MIME Code Signing Smartcard 802.1x EAP-TLS etc.
- Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.
- Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.
- Knowledge of PKI Standards including but not limited to:
- Understanding of X.509 Certificate Management Standards
- Creating and maintaining Certificate Policy and Practice Statement (CP/CPS)
- Understanding of CA/Browser Forum Baseline Requirement
Basic Qualifications:
- US Citizenship Required
- Recognized degree in Computer Science or Information Technology from an accredited college or university or specialized courses in networking information technology server administration and infrastructure operations or equivalent work experience in a related field.
- Bachelors or Masters degree (or international equivalent) and a minimum of 8 - 10 years of relevant experience or 12 - 14 years of relevant work experience in lieu of a degree
- Windows/Linux System Administration
- Relevant Microsoft certifications are also highly desirable
Minimum Qualifications:
- Excellent technical communication writing meeting facilitation and presentation skills.
- Self-driven and resourceful to achieve goals independently as well as motivate the group to deliver technical excellence and quality of service.
- Flexibility to adjust to changing requirements schedules and priorities
- Ability to learn and adapt to new technologies present proof of concepts
- Time management skills with a focus on quality service and deliverables
- Ability to comprehend and effectively translate customer requirements into technical solutions
- Ability to create documentation and process diagrams for support personnel
TekWissen Group is an equal opportunity employer supporting workforce diversity.