AveningTech is seeking a Lead PKI Network Engineer to support the Marine Corps Cyber Operations Group (MCCOG) Public Key Infrastructure (PKI) contract. This role provides technical expertise for concept exploration, requirements development, implementation, and enhancement of DoD PKI and USMC capabilities, and will work out of Quantico in VA (100% onsite).
Primary Responsibilities: - PKI Network Operations-
- Serve as the Network SPOC, providing technical oversight and guidance to PKI Network Operations staff.
- Maintain resilient certificate issuance and revocation infrastructure across MCEN networks.
- Ensure Marine Corps PKI requirements are integrated into future DoD PKI architecture.
- Support assessments of USMC impacts from DoD PKI PMO activities, including mobile device PKI and non-person entity issuance.
- Troubleshoot and resolve PKI-related issues (certificates, tokens, infrastructure services).
- Perform user account management, PKI system backups, and disaster recovery tasks.
- Support SIPRNET Token Management System (TMS) and lead systems administration for DoN PKI.
- Training and Outreach-
- Develop and deliver PKI Tactical Training Plans and materials for garrison and tactical networks.
- Configure and maintain PKI Tactical training suites using hypervisor technology.
- Provide training courses for deploying Marines, including PKI 101, CVI, Cryptographic Logon, PKI Administration, and Troubleshooting.
- Hardware Security Module (HSM) Support-
- Develop and maintain HSM-related training plans and materials.
- Configure and operate HSM training suites and deliver courses for deploying Marines.
- Certificate Authority (CA) Support-
- Provide technical support for Microsoft Active Directory, DoD PKI, and other CA technologies.
- Deploy and configure new Certificate Authorities per DoD security standards.
- Monitor CA health, publish Certificate Revocation Lists, and perform Tier III troubleshooting.
- Develop and maintain CA disaster recovery and COOP plans.
- Certificate Validation Infrastructure (CVI) Support-
- Support CVI technologies, including OCSP, Desktop Validator, and Enterprise Validation Authority.
- Deploy and maintain CVI software and configurations across USMC networks.
- Monitor CVI health and perform Tier III troubleshooting.
- Further support as necessary in the following areas: Tier III PKI issues, public key enabling, configuration management, PKI system infrastructure, virtual infrastructure, SAN, server management, event management, etc.
|