What are the responsibilities and job description for the PKI Engineer - 1001, 24-494 position at Zivaro?
Empower your career with Zivaro, where passion meets innovation and inclusion! Embrace the future of IT while being a part of Zivaro's pioneering tech community.
Zivaro isn't just about technology—it's about people. We thrive on the energy, talent, and dedication of our workforce. From our culture to professional development, we prioritize our team. We live by our core values every day and hope you will as well! Come join a Top Workplaces organization!
The selected candidate will support the DevSecOps team to design, develop, test, implement, and integrate PKI solutions to focus on code signing and key management operations. The PKI engineer will design and implement a certificate lifecycle management process. The selected candidate will have extensive experience in managing and maintaining PKI environments and Active Directory Certificate Services. You will work with the architecture, engineering, operations, and support teams to integration the PKI solution into the program in accordance with NIST 800-57 and CNS 1300 standards.
Responsibilities
U.S. Citizenship is required for all positions at Zivaro, due to security clearance and government/federal contracts held by Zivaro.
EEO STATEMENT
Zivaro, Inc. is an equal opportunity employer. In accordance with anti-discrimination law, it is the purpose of this policy to effectuate these principles and mandates. Zivaro prohibits discrimination and harassment of any type and affords equal employment opportunities to employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
PI261661276
Zivaro isn't just about technology—it's about people. We thrive on the energy, talent, and dedication of our workforce. From our culture to professional development, we prioritize our team. We live by our core values every day and hope you will as well! Come join a Top Workplaces organization!
The selected candidate will support the DevSecOps team to design, develop, test, implement, and integrate PKI solutions to focus on code signing and key management operations. The PKI engineer will design and implement a certificate lifecycle management process. The selected candidate will have extensive experience in managing and maintaining PKI environments and Active Directory Certificate Services. You will work with the architecture, engineering, operations, and support teams to integration the PKI solution into the program in accordance with NIST 800-57 and CNS 1300 standards.
Responsibilities
- Applies extensive expertise
- Solves complex problems that require the regular use of ingenuity and creativity
- Work is performed without appreciable direction and is reviewed for desired results from a relatively long time perspective
- May function in project leadership roles and represents the organization as prime customer contact on significant technical matters on contracts
- Demonstrated ability to multi-task, to be self-initiated, and work independently
- Excellent customer service and interpersonal skills, excellent time management skills
- Excellent organizational, research, analytical and/or problem-solving skills to evaluate situations, make recommendations, and take effective action
- Knowledge and skill in technical problem resolution
- Strong attention to detail and outstanding analytical skills, strong written and verbal communication skills
- Must be an effective communicator with excellent writing
- Must be responsible to work independently / solo at times on large projects, at other times will be in a collaborative team environment with other DevSecOps engineers, as well as other program development and deployment teams
- 5-7 years' experience supporting Microsoft Active Directory Certificate Services and PKI technologies
- Participate in efforts related to designing, planning, implementing, and maintaining digital code signing
- Manage certificate enrollment, renewal, and revocation processes
- Ensure the security and integrity of the PKI environment
- Monitor and troubleshoot PKI and Active Directory Certificate Services related issues
- Collaborate with other Cyber, IT and Operational teams to integrate PKI solutions with existing systems
- Stay updated with industry trends and best practices in PKI and Active Directory Certificate Services
- Support processes and implement capabilities to support application code integrity, secure SDLC activities, and key management
- Develop and maintain critical technical and cyber infrastructure and capabilities for certificate management
- Implement security measures to protect against unauthorized access and ensure compliance with industry regulations and internal policies
- Experience with Linux/Unix, Windows, scripting (with programming languages such as Bash, PowerShell, or Perl), SQL, LDAP, and web services
- Develop PowerShell scripts for administrative and automation tasks
- Support Security Engineering efforts and Cyber Roadmap development and maturation
- Support ongoing Security Engineering and architecture efforts.
- Understanding of X.509 Certificate Management Standards
- Understanding of NIST 800-57 and CNS 1300 PKI Standards
- 7 years' experience
- IAM Level III DoDI 8570 certification required
- DoD IAT Level II required
- Secret Clearance Required
U.S. Citizenship is required for all positions at Zivaro, due to security clearance and government/federal contracts held by Zivaro.
EEO STATEMENT
Zivaro, Inc. is an equal opportunity employer. In accordance with anti-discrimination law, it is the purpose of this policy to effectuate these principles and mandates. Zivaro prohibits discrimination and harassment of any type and affords equal employment opportunities to employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.
PI261661276
