PKI and Cyber Security Engineer

Mount Indie is seeking a PKI and Cyber Security Engineer to support enterprise Public Key Infrastructure (PKI) operations and cybersecurity initiatives for the Defense Logistics Agency (DLA). The successful candidate will have hands-on experience engineering, implementing, securing, and maintaining enterprise PKI environments, including Certificate Authority (CA) infrastructure, Online Certificate Status Protocol (OCSP) services, certificate management, and cloud integration.

This role supports critical enterprise systems and applications by ensuring secure certificate services, high availability, vulnerability remediation, and compliance with Department of Defense (DoD) security requirements. The candidate will work closely with technical teams, system administrators, vendors, and government stakeholders to troubleshoot complex issues, improve infrastructure resiliency, and support evolving enterprise security requirements.

Key Responsibilities

• Engineer, implement, optimize, and sustain enterprise PKI infrastructure, including Certificate Authority (CA) servers, OCSP responders and repeaters, and related services.
• Configure, deploy, and maintain PKI technologies and services, including Active Directory Certificate Services (AD CS), Network Device Enrollment Service (NDES), Simple Certificate Enrollment Protocol (SCEP), and certificate management solutions.
• Support PKI and OCSP integration with cloud environments, including Microsoft Azure and Amazon Web Services (AWS).
• Develop and maintain certificate issuance and management capabilities for SSL/TLS, non-person entity (NPE), device, code-signing, and other enterprise certificates.
• Integrate PKI services with enterprise applications, web portals, and systems requiring secure authentication and certificate-based access.
• Design, implement, and maintain highly available PKI infrastructure, including physical and virtual servers, repeaters, and disaster recovery capabilities.
• Perform PKI troubleshooting, root cause analysis, performance diagnostics, and service recovery to minimize operational disruptions.
• Apply security patches, upgrades, and configuration changes to remediate vulnerabilities and maintain secure system operations.
• Ensure compliance with applicable DoD security requirements, DISA Security Technical Implementation Guides (STIGs), Information Assurance Vulnerability Management (IAVM) requirements, NIST guidance, and Federal Information Processing Standards (FIPS).
• Develop and maintain technical documentation, standard operating procedures (SOPs), PKI runbooks, continuity of operations plans (COOPs), and key recovery documentation.
• Support enterprise key management and key ceremonies in accordance with multi-person integrity requirements.
• Participate in security audits, compliance assessments, and audit-readiness activities.
• Analyze security risks and recommend mitigation strategies, infrastructure improvements, and long-term security solutions.
• Coordinate technical projects and infrastructure changes with government stakeholders, system administrators, cybersecurity teams, and external vendors.
• Support PKI middleware configuration, testing, upgrades, and escalated technical issues.
• Contribute to PKI modernization initiatives and emerging DoD PKI requirements.

Required Qualifications

• Active Top Secret clearance
• A degree in Information Technology, Computer Science, Cybersecurity, or a related field is preferred. Relevant hands-on experience and industry certifications may be considered in place of a degree
• IAT Level II certification: may include CISSP, CompTIA Security+, Microsoft Azure AA, Microsoft Azure SAE, Microsoft Certified Solutions Expert (MCSE): Cloud Platform and Infrastructure, Windows Server Hybrid Administrator Associate, AWS CCP:Amazon Web Services Certified Cloud Practitioner
• Hands-on experience with certificate services, certificate issuance and life-cycle management, and OCSP infrastructure.
• Experience supporting Windows Server environments, including physical and virtual infrastructure.
• Knowledge of cybersecurity principles, vulnerability remediation, security hardening, and enterprise security compliance.
• Experience troubleshooting complex infrastructure issues and performing root cause analysis.
• Ability to develop technical documentation, procedures, and infrastructure support plans.
• Strong written and verbal communication skills, with the ability to work effectively with government customers and cross-functional technical teams.

Preferred Qualifications

• Experience supporting DoD or other federal government enterprise PKI environments.
• Demonstrated experience engineering, administering, and supporting enterprise PKI environments.
• Experience integrating PKI and OCSP services with Microsoft Azure and AWS environments.
• Has an understanding of how Microsoft Active Directory ties into Enterprise PKI
• Experience with NDES, SCEP, NPE certificates, SSL/TLS certificates, and code-signing certificates.
• Knowledge of DISA STIGs, IAVM, NIST, FIPS, and other applicable federal and DoD cybersecurity requirements.
• Experience with PKI high availability, disaster recovery, continuity of operations, and enterprise key management.
• Experience with Splunk, Cribl, and enterprise log collection.
• Experience supporting vulnerability remediation, security audits, and compliance assessments.