SC3

PKI Engineer

US-DC-Washington
4 weeks ago
Job ID
2017-1234
# of Openings
1
Category
Information Technology

Overview

SC3 is a leading provider of high-end mission support, consulting and technology solutions to the federal government in defense, intelligence, and civil markets, and to major corporations and nonprofit organizations. SC3’s national security efforts reach across the intelligence community and Department of Defense, providing full life-cycle operational and cyber support and differentiated capabilities to meet our customer’s challenging mission.

 

In addition to our government services area, SC3 provides cutting-edge competitive intelligence and strategic management consulting to commercial clients. Private industry leaders from the financial, health care, manufacturing and other sectors turn to SC3 to ensure that they have access to the most relevant, current, and strategically important information – not only to grow their businesses, but also to protect them.

Responsibilities

The PKI Engineer - Senior will have the following qualifications and requirements

 

      • Commercial Title: Software Systems Engineer - Sr
      • Minimum General Experience: Requires a minimum of 10 years’ experience
      • Functional Responsibility: Under general direction, formulates and defines specifications for complex operating software programming applications or modifies/maintains complex existing applications using engineering releases and utilities from the manufacturer. A design, codes, tests, debugs, and documents those programs. Responsible for applications dealing with the overall operating system, such as sophisticated file maintenance routines, large telecommunications networks, computer accounting, and advanced mathematical/scientific software packages. Competent to work at this highest technical level on all phases of software systems programming applications. May have responsibility for the evaluation of new and existing software products. May assist other systems programmers to effectively utilize the system’s technical software.
      • Minimum Education: Bachelor’s degree or without degree 12 or more years of experience related to position.
    • Requirements:
      • Serves as an Identity and Access Management subject matter expert and technical project lead
      • Engage with technical experts from different domains to address and solve complex Information Security challenges and issues
      • Provide input into infrastructure investment decisions and strategies
      • Provide guidance over general information security activities and concerns of the organization’s infrastructure function including: governance, policy, design, general operational effectiveness and internal control so Engage in the implementation security design/integration of critical initiatives from the Technology Services strategy 
      • Perform PKI end-user training
      • Perform full service directory(FSD) Administration
      • Perform administration and maintenance of Hardware Security Module (HSM) as related to Certificate Authority infrastructure
      • Provide insights into the advantages and challenges of self-managed/outsourced/hybrid PKI models
      • Must Have skills:
        • Extensive experience with PKI engineering, implementation, and support
      • Education/Experience:
        • 6+ years in PKI infrastructure, with 5 years managing a certificate authority in a Microsoft Environment 
        • Experienced 7 or more years in management of load-balancer rules/pool/health-check configuration, troubleshooting, and administration
        • Experienced 7 or more years in SSL cert management
        • Strong knowledge of Web application architecture
        • Assertive to drive issues (and make decisions) through to resolution including escalations to appropriate management levels, while maintaining professionalism in all communications with both internal and external parties
        • Must have experience with Online Certificate Status Protocol (OCSP) responder integration and troubleshooting

Qualifications

  • Extensive experience with PKI engineering, implementation, and support
  • Must have integration/configuration/administration experience, and possess a solid Network background including an understanding of switch, network routing, and firewall concepts.
  • Possess very strong troubleshooting skills as well as a strong TCP understanding as it pertains to packet inspection and TCP flow in the Network and Application flows.
  • Good understanding of DNS functionality and concepts as it relates to IPv4 and IPv6.

Education/Experience:

  • 8+ years IT experience, minimum  demonstrable experience to provide the ability to understand and troubleshoot across various level of infrastructure: § Networking ( Topology, Routing, Firewall, hardware
  • 4 years in Load Balancing technology
  • 6+ years in PKI infrastructure, with 5 years managing a certificate authority in a Microsoft Environment 
  • Experienced 7 or more years in management of load-balancer rules/pool/health-check configuration, troubleshooting, and administration
  • Experienced 7 or more years in SSL cert management
  • Experienced 7 or more years in network background including an understanding and troubleshooting of network layers (TCP), switch, network routing (EIGRP, MPLS, BGP), and firewall infrastructure.
  • Strong knowledge of Web application architecture
  • Assertive to drive issues (and make decisions) through to resolution including escalations to appropriate management levels, while maintaining professionalism in all communications with both internal and external parties
  • Must have experience with Online Certificate Status Protocol (OCSP) responder integration and troubleshooting
  • Bachelor’s degree in computer science, software engineering or relevant field preferred, equivalent experience is acceptable
  • Proven experience with Enterprise business and large-scale LAN/WAN environments, network capacity planning, network security principles, and general network management best practices.

Options

Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed