SITEC - PKI Architect - MacDill AFB

Job Locations US-FL-MacDill AFB
Requisition ID
2025-160705
Position Category
Information Technology
Clearance
Top Secret/SCI

Responsibilities

Peraton requires Systems Architects to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.  This position is located at MacDill AFB in Florida.   

 

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. 

 

SOF Integration Facility team is seeking a Security Architect to strengthen USSOCOM's security posture by focusing on secure design reviews, threat modeling, and vulnerability remediation. This role is integral to ensuring our enterprise systems meet the highest security standards. The ideal candidate will be highly skilled in identifying, analyzing, and mitigating security risks, as well as collaborating with development teams to remediate vulnerabilities in design and code effectively. Additionally, the position involves creating secure reference architectures informed by design reviews and industry best practices. Your expertise will help us achieve excellence in supporting the warfighter and enhancing national security.

 

  • Design, deploy, and manage highly available PKI solutions ensuring secure and resilient operations across the organization, and establish integration of PKI with enterprise applications and systems to ensure secure communication and data protection
  • Utilize and manage PKI tools such as Microsoft Active Directory Certificate Services, OpenSSL, HashiCorp Vault, and AWS Certificate Manager for key management and distribution, and configure, deploy, and manage Hardware Security Modules (HSMs) to enhance the security of key storage and operations
  • Develop and implement strategies and processes for effective key lifecycle management including creation, distribution, rotation, renewal, and revocation, and integrate PKI with Registration Authorities (RA) and Certificate Authorities (CA) to streamline key issuance and management processes
  • Define target state architecture and target operating models for PKI infrastructure, ensuring alignment with organizational security strategies, and collaborate with cross-functional teams to support cryptographic protocols and security initiatives
  • Monitor PKI infrastructure for security threats and vulnerabilities, conduct regular assessments and audits to ensure compliance with industry standards, and troubleshoot and resolve PKI-related issues with escalation and SLA adherence
  • Document PKI architecture, processes, procedures, and strategic approaches, while creating and maintaining client knowledge articles, PKI Standard Operating Procedures (SOPs), architecture and scripts to ensure smooth operations and quick issue resolution, and develop procedures and documentation for continuous improvement and maintenance activities related to IAM solutions
  • Work closely with the Windows, Linux, Application Engineering, and Operations teams to support and integrate security into every level of the enterprise environment
  • Troubleshoot escalated issues, offer technical training, and assist with all PKI/Certificate related issues

Qualifications

Required Qualifications:

  • Min 6 years with HS degree, 4 years with AS/AA degree, 2 years with BS/BA
  • DoD 8570 IAT II Certification
  • TS/SCI clearance or higher is required
  • Experience with architectural design and implementation
  • Strong experience deploying, managing, and administrating certificate lifecycle management tools
  • Familiarity with cloud security concepts and best practices, particularly in Gov AWS and Azure environments
  • Excellent problem-solving skills and ability to analyze complex systems and architectures
  • Strong communication and interpersonal skills, with the ability to effectively communicate technical concepts to non-technical stakeholders
  • Strong knowledge of government security requirements and compliance standards.
  • Exceptional troubleshooting and problem-solving skills, with experience in performing root cause analysis

Desired Qualifications:

  • Experience in programming languages such as Java, Python, or C++ is advantageous, and familiarity with cloud-based PKI solutions and their integration
  • Knowledge of Zero Trust principles, frameworks, and implementation strategies
  • Knowledge of Agile, ITSM, DevSecOps, and change management processes
  • Knowledge of modern IT infrastructure and emerging technologies
  • Experience in writing technical documentation

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Options

Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed