SITEC PKI Architect - MacDill

We are seeking an experienced and motivated Public Key Infrastructure (PKI) Architect to join our dynamic team.  As the PKI Architect, you will be responsible for architecting systems that meet our security, compliance, and mission requirements. 

Duties and responsibilities include but are not limited to:

• Design, field and document single tier and multi-tier PKI Certificate Authorities (CAs) and validate infrastructures on connected and disconnected networks of varying classifications.
• Create and maintain certificate profiles to support issuance scenarios across multiple platforms and software vendors.
• Create, design, and implement an on premise HSM system (SafeNet LUNA, Thales, or comparable options) to safeguard the enterprise’s cryptography keys on servers and apps.
• Encourage expansion of PKI across the enterprise.
• Offer continuous application teams integration support and assistance with cryptography.
• Provide operational support and assistance with infrastructure implementation for Enterprise Key Management (EKM) systems on-site, together with Cloud HSM, Azure KeyVault, and Amazon Web Services (AWS)
• Partner with stakeholders and outside vendors to design, develop, implement, and support best-in-class solutions.
• Conduct continuous evaluations and remediation of the current PKI infrastructure.
• Work closely with the Windows, Linux, Application Engineering, and Operations teams to support and integrate security into every level of the enterprise environment.
• Troubleshoot escalated issues, offer technical training, and assist with all PKI/Certificate related issues.
• Enable auto renewal automation with both private and public certificates on web and internal facing applications; and contribute to the improvement of network/system security engineering and maintenance practices.

Required Qualifications:

• BS Degree with 12 Years experience as a PKI Engineer or Architect, or a MS Degree with 10 Years experience, or a PhD with 7 Years experience in a related field is required
• Experience with architectural design and implementation.
• Strong experience deploying, managing, and administrating certificate lifecycle management tools.
• Familiarity with cloud security concepts and best practices, particularly in Gov AWS and Azure environments.
• Excellent problem-solving skills and ability to analyze complex systems and architectures.
• Strong communication and interpersonal skills, with the ability to effectively communicate technical concepts to non-technical stakeholders.

• TS/SCI clearance is required for this role

Preferred Qualifications:

• PowerShell experience to support client and server application installation, reconfiguration, and maintenance.
• Commercial Solutions for Classified (CSfC) experience

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.