Note: The job is a remote job and is open to candidates in USA. phia, LLC provides cyber protection engineering, operations, and technical support services to federal agencies and other partners. The Senior Cybersecurity Engineer (PKI Security) will support PKI administration and Certificate Authority operations, resolve certificate-related issues, guide stakeholders, automate certificate management, and provide technical mentorship and reporting.
Responsibilities
- Support internal and external customers with certificate-related issues across USPS applications and services
- Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures
- Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations
- Support certificate automation using Venafi/CyberArk Trust Protection Platform (TPP) identifying opportunities to incorporate AI into automation efforts
- Create reports and documentation using AI and other automation tools
- Provide mentorship and management support for the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff
- Stay current on encryption technologies and standards, with particular focus on PKI and CA productions, solutions, and operational best practices
- Provide status and activity reporting and plans to management
- Extensive automation and scripting experience and capabilities
- Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment
- Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code
- Proficiency in PowerShell and Python scripting
- Strong understanding of Public Key Infrastructure (PKI) including: Certificate Authority (CA) Administration; Certificate Enrollment Web Service & Policy Web Service; Active Directory Certificate Services (ADCS) monitoring
- Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration
- Strong communication skills with IT customers, developers, and system administrators
- Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs)
- Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions
- Knowledge of Post Quantum Cryptography (PQC)
- Ability to work independently, work in a fast-paced environment, and attention to detail
- Excellent communication, organizational, and interpersonal skills
- Experience with ServiceNow or other Change/Incident/Problem management ticketing technology
- IT system administration experience (systems management, networks, firewalls) in an enterprise environment
- Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
- Experience with Microsoft Windows Server configuration, deployment, and troubleshooting
- Experience with Unix and Linux configuration and troubleshooting
- Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
- Proficiency with server virtualization technologies (VMWare, HyperV)
- Database administration (MSSQL) experience
- U.S. Citizenship required
- Ability to obtain Public Trust clearance
Skills
- Extensive automation and scripting experience and capabilities
- Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment
- Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code
- Proficiency in PowerShell and Python scripting
- Strong understanding of Public Key Infrastructure (PKI) including:
- Certificate Authority (CA) Administration
- Certificate Enrollment Web Service & Policy Web Service
- Active Directory Certificate Services (ADCS) monitoring
- Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration
- Strong communication skills with IT customers, developers, and system administrators
- Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs)
- Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions
- Knowledge of Post Quantum Cryptography (PQC)
- Ability to work independently, work in a fast-paced environment, and attention to detail
- Excellent communication, organizational, and interpersonal skills
- BA/BS in cybersecurity, IT or related field, with 9+ years of direct experience in cybersecurity and IT administration/engineering
- 12+ years of experience in cybersecurity and IT administration/engineering
- U.S. Citizenship required
- Ability to obtain Public Trust clearance
- Experience with ServiceNow or other Change/Incident/Problem management ticketing technology
- IT system administration experience (systems management, networks, firewalls) in an enterprise environment
- Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
- Experience with Microsoft Windows Server configuration, deployment, and troubleshooting
- Experience with Unix and Linux configuration and troubleshooting
- Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
- Proficiency with server virtualization technologies (VMWare, HyperV)
- Database administration (MSSQL) experience
- CyberArk / Venafi Security Administrator (VSA)
- Entrust nShield Certified Systems Engineer (nCSE)
- EC-Council Certified Encryption Specialist (ECES)
- Core cybersecurity certifications (e.g. CISSP, CompTIA Security+)
- Core networking certifications (e.g. CompTIA Network+, CCNA, CCENT)
Benefits
- REMOTE work flexibility
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short Term & Long Term Disability
- 401k Retirement Savings Plan with Company Match
- Paid Holidays
- Paid Time Off (PTO)
- Tuition and Professional Development Assistance
Company Overview