Senior PKI Security Administrator

ECS is seeking a Senior PKI Security Administrator to work remotely.

Responsibilities include:

• Support internal and external customers with certificate-related issues across USPS applications and services.
• Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
• Create reports and documentation using AI and other automation tools.
• Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
• Support certificate automation using Venafi/CyberArk TPP identifying opportunities to incorporate AI into automation efforts.
• Supervise the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff

Salary Range: $130,000-$160,000

General Description of Benefits

• Bachelor’s degree in computers or other IT, Security related major; or equivalent experience

• 9+ years’ relevant experience

• Ability to work independently, work in a fast-paced environment, and attention to detail      
• Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.
• Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code.
• Proficiency in PowerShell scripting.
• Strong understanding of Public Key Infrastructure (PKI) including:
• Certificate Authority Administration
• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring
• Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.
• Strong communication skills with IT customers, developers, and system administrators.
• Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).
• Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.
• Knowledge of Post Quantum Cryptography