Cyber Security Engineer

Description:

Grant Leading Technology is seeking a candidate for an Intermediate Cyber Security Engineer Public Key Infrastructure (PKI) to join our dynamic team. The candidate will provide advanced engineering, administration, and operational support for a large-scale Department of Defense (DOD) PKI environment supporting the Defense Logistics Agency (DLA). This position is responsible for engineering secure PKI solutions, maintaining trusted operating system baselines, implementing cryptographic technologies, and supporting enterprise certificate lifecycle management across on-premises and cloud environments.

The engineer will support the design, implementation, testing, deployment, and maintenance of PKI infrastructure while ensuring compliance with DOD cybersecurity requirements. The position requires collaboration with cybersecurity, infrastructure, cloud, and application teams to ensure secure identity management and certificate services across enterprise systems.

This position is located at DLA facilities near Richmond, VA and requires on-site support for classified DOD PKI environments.

Candidates must possess an active Secret Security Clearance and a High Risk, Critical Sensitive Tier 5 (SSBI) investigation prior to start.

This position will be onsite, and the hours are 8 am to 5 pm EST.

Responsibilities

 Engineer, implement, administer, and maintain enterprise PKI environments supporting DLA mission systems
 Design, configure, and maintain Certificate Authorities (CAs), Registration Authorities (RAs), Online Certificate Status Protocol (OCSP), Certificate Revocation Lists (CRLs), and related PKI components
 Support enterprise deployment, migration, and lifecycle management of PKI applications and services
 Configure, test, deploy, and troubleshoot Hardware Security Modules (HSMs) supporting certificate authorities and cryptographic operations
 Support Enterprise Key Management activities utilizing two-person integrity controls
 Support Key Ceremonies utilizing multi-person integrity procedures in accordance with Trusted Operating System requirements
 Develop and maintain Server-Based Certificate Validation Protocol (SCVP) policies and certificate validation services
 Install, configure, secure, and maintain Windows Server 2019 through current supported versions supporting PKI services
 Develop, test, deploy, and maintain FDCC Windows 11 and FSCC Windows Server baselines
 Perform operating system installations, upgrades, migrations, and system hardening
 Test and deploy operating system patches, service packs, and application updates
 Maintain enterprise test environments supporting PKI engineering and validation activities
 Monitor system performance, conduct tuning activities, and implement engineering best practices
 Configure, deploy, and manage enterprise certificates supporting users, applications, servers, and non-person entities (NPE)
 Support Device Certificates for NIPRNet and SIPRNet Non-Key Terrain systems
 Maintain Windows Trust Stores and Untrusted Certificate Stores
 Support Public Key Enablement (PKE) for enterprise web applications and services
 Support Federal Bridge interoperability and integration of PKI services into enterprise applications
 Configure, administer, and maintain cloud-based Key Management Systems including:
 Microsoft Azure Key Vault
 AWS Key Management Service (KMS)
 Future approved cloud cryptographic services
 Integrate cloud-based certificate management with enterprise PKI services
 Support secure hybrid cloud identity and certificate architecture
 Review and analyze hardware, software, firmware, and operating system changes for security impacts
 Evaluate security alerts, vulnerabilities, and vendor advisories affecting PKI infrastructure
 Apply CERT-directed patches using Windows Server Update Services (WSUS)
 Ensure compliance with:
 DISA STIGs
 DOD Cybersecurity requirements
 FDCC
 FSCC
 Trusted Operating System standards
 Participate in PKI compliance assessments and security audits
 Research, evaluate, test, and recommend emerging PKI technologies
 Conduct proof-of-concept testing for new cryptographic products and capabilities
 Develop engineering documentation, implementation guides, standard operating procedures, and technical recommendations
 Provide Tier III engineering support for enterprise PKI infrastructure
 Troubleshoot complex PKI, certificate, middleware, and cryptographic issues
 Support production, development, and test PKI environments
 Collaborate with cybersecurity, cloud, infrastructure, and application teams to ensure secure integration of PKI services

Qualifications And Education Requirements

 Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field
 Minimum seven (7) years supporting enterprise PKI or cybersecurity engineering
 Must possess a Secret Security Clearance including High Risk, Critical Sensitive, Tier 5 (SSBI) investigation
 Must possess a current DOD Approved 8570/8140 Baseline Certification (CASP+, CISSP, CCNP Security (as applicable under DOD guidance), GCED, GCIH, or Other DOD-approved IAT Level III certifications
 Must possess one of the following current certifications:
 Microsoft Certified Solutions Expert (MCSE): Cloud Platform and Infrastructure
 Microsoft Certified: Windows Server Hybrid Administrator Associate
 Microsoft Certified: Azure Solutions Architect Expert (or equivalent Microsoft Azure certification meeting contract requirements)
 Must live in a commutable distance of Richmond, Virginia or Ogden, Utah and be authorized to work in the United States