ECS is seeking a Senior PKI Security Administrator to work remotely.
Responsibilities include:
Support internal and external customers with certificate-related issues
across USPS applications and services.
Provide guidance and training to key stakeholders on PKI lifecycle
management, processes, and procedures.
Create reports and documentation using AI and other automation tools.
Review complex PKI and certificate-related issues, determine effective
solutions, and recommend improvements to ensure efficient, reliable, and
sustainable operations.
Support certificate automation using Venafi/CyberArk TPP identifying
opportunities to incorporate AI into automation efforts.
Supervise the PKI team, develop project requirements for complex and critical
applications, provides sound strategic advice, technical expertise, and
guidance to program and project staff
Salary Range: $130,000-$160,000
General Description of Benefits [https://ecstech.com/careers/benefits]
Qualifications
Bachelor’s degree in computers or other IT, Security related major; or
equivalent experience
9+ years’ relevant experience
Ability to work independently, work in a fast-paced environment, and
attention to detail
Strong knowledge of REST API integration, Simple Certificate Enrollment
Protocol (SCEP), and Microsoft AD auto-enrollment.
Familiarity with technologies such as VCERT, Portable Git, Ansible, and
Visual Studio Code.
Proficiency in PowerShell scripting.
Strong understanding of Public Key Infrastructure (PKI) including:
Certificate Authority Administration
Certificate Enrollment Web Service & Policy Web Service
Active Directory Certificate Services (ADCS) monitoring
Infrastructure experience in one or more of the following areas: IT or server
administration, networking, Active Directory/LDAP, Unix/Linux,
virtualization, or access control administration.
Strong communication skills with IT customers, developers, and system
administrators.
Strong experience with certificate management tools, preferably
Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security
Modules (HSMs).
Heavy experience troubleshooting digital certificate issues, with an interest
in advancing automation and AI-driven solutions.
Knowledge of Post Quantum Cryptography