Pki Certificate Authority Engineer I
Experience
5 - 7 years
Job location
Kuwait City, Kuwait
Education
Bachelor of Technology/Engineering
Nationality
Any nationality
Gender
Not mentioned
Vacancy
1 vacancy
Job description
Roles & responsibilities
Overview
Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.
The PKI Certificate Authority Engineer is required to be certified at the expert level in multiple disciplines of systems and security (e.g. MCSE & CISSP). The engineer provides expert level engineering support for all Public Key Infrastructure services. A PKI Certificate Authority Engineer supports enterprise-class infrastructure in the RCC-SWA by providing optimization, administration, and technical documentation of all Public Key Infrastructure systems.
The engineer shall perform discovery, analysis, monitoring, and management of all digital certificates deployed by the Certificate Authority (CA). The position will collaborate with system owners and serve as the primary support entity for problem escalation, reporting directly to the section team lead. Broad knowledge and expert level hands-on experience in a large enterprise are essential for success in this role.
Program: OMDAC-SWACA
This position offers company-paid housing and transportation, a completion bonus, and tuition reimbursement program! You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver's license in order to be qualified for this position.
Responsibilities
Operate and maintain Certificate Authority Servers including databases and Hardware Security Module on NIPR, SIPR, and Coalition enclaves.
Manage the CA life cycle, including generation, revocation, expiry, and updating to determine where each certificate is installed.
Troubleshoot Active Directory Certificate Services, HSMs, Certificate Enrollment Web Services, Certificate Enrollment Policy Web Service, and Internet Information Services (IIS).
Aid with defining and developing the strategic plan for Public Key Infrastructure (PKI) and assist with the implementation of PKI and other certificate related technologies.
Create and maintain system documentation for certificate-based technologies, including installation, configuration, and appropriate troubleshooting steps.
Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
Perform other duties and assignments as required.
Desired candidate profile
Qualifications
Security clearance: Requires an active Secret Clearance
Education / Certifications: One year of related experience may be substituted for one year of education, if degree is required. Bachelor's Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field. This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification.
The authorized certifications for this job title are listed as follows:
Baseline:
Cisco: CCNP Security
CompTIA: CASP+ ce: Advanced Security Practitioner
GIAC: GCED: Certified Enterprise Defender
GIAC: GCIH: Certified Incident Handler
ISACA: CISA: Certified Information Systems Auditor
ISC2: CCSP Certified Cloud Security Professional
ISC2: CISSP (or Associate): Certified Information Systems Security Professional
Computing Environment (CE):
Microsoft: 365 Certified: Enterprise Administrator Expert
Microsoft: Certified: Azure Database Administrator Associate
Microsoft: Certified: Azure Security Engineer Associate
Microsoft: Certified: Azure Solutions Architect Expert
Microsoft: MCSA: Cloud Platform
Microsoft: MCSA: Windows Server 2012
Microsoft: MCSA: Windows Server 2016
Microsoft: MCSE: Cloud Platform and Infrastructure
Microsoft: MCSE: Core Infrastructure
Microsoft: MCSE: Data Management and Analytics
Microsoft: MCSE: Productivity Solutions Expert
Microsoft: MCSE: Server Infrastructure 2012
Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience. At least five (5) years of practical experience working with:
MS Active Directory Domain Services
MS Active Directory Certificate Services (AD CS)
Public Key Infrastructure (PKI)
Cryptography standards
Managing keystores (JKS, JCEKS, PKCS#12)
Windows MSCS and trust stores
Hardware security modules (HSMs)
Key management services (KMS)
Online Certificate Status Protocol (OCSP)
Two-factor authentication: RSA, Smartcards (CAC)
Understanding of FIPS 140-2 compliance and Standard Technical Implementation Guides (STIGs)
Experience with a customer service-oriented company
Skills & technology used
Ability to troubleshoot servers and infrastructure equipment, assess networking requirements and provide solutions, and make accurate and independent decisions under pressure. Excellent organizational, interpersonal, written, and verbal communication skills. Ability to perform comfortably in a fast-paced, deadline-oriented work environment and to successfully execute many complex tasks simultaneously.
MS Active Directory Domain Services, MS Active Directory Certificate Services (AD CS), Public Key Infrastructure (PKI), Cryptography Standards, JKS, JCEKS, PKCS#12, Windows MSCS.
Company industry
Defence Military Government
Department / functional area
IT Software
Keywords
PKI Certificate Authority Engineer I