PKI Governance and Configuration Manager

Job Title: PKI Governance and Configuration Manager
Location: Springfield, VA
Required Security Clearance: Top Secret

Responsibilities

• Oversee the integrity, security, and compliance of Department of State’s PKI and Credential hosting systems.
• Manage the governance lifecycle for multiple PKI systems and Credential Hosting environments, including enforcing adherence to Certificate Policy (CP) and Certification Practice Statements (CPS).
• Lead all NIST SP 800-53 security compliance assessments and maintain comprehensive security artifacts (SSP, SAR, POA&M, etc.).
• Manage the FedRAMP certification process for SaaS offerings and ensure continuous monitoring to maintain Authority to Operate (ATO).
• Establish and manage configuration management baselines and lead the Change Advisory Board (CAB) to evaluate security impacts of system modifications.
• Coordinate security posture synchronization across Unclassified (NIPR), Classified (SIPR), and Cloud/SaaS environments and ensure seamless identity management and credential interoperability.

Requirements

• Bachelor’s degree with at least 9 years of experience, or Master’s degree with at least 7 years of experience; additional experience may be considered in lieu of degree.
• 8+ years in cybersecurity, with at least 5 years focused on PKI and Federal Governance (GRC).
• Deep understanding of X.509 certificates, HSMs, CRLs, and OCSP.
• Mastery of NIST SP 800-53, NIST SP 800-37 (RMF), FIPS 140-2/3, NIST SP 800-157 (Rev-1), NIST SP 800-63, and FedRAMP Moderate/High standards.
• Proven experience leading systems through the full Assessment and Authorization (A&A) process for ATO.
• Certifications such as CISSP, CISM, GSLC, ITIL, PMP, or specialized PKI certifications are preferred.
• Proficiency in Identity Systems (Active Directory Certificate Services, Entrust, EJBCA), Cloud Security (FedRAMP OSCAL, AWS/Azure Government Cloud controls), and tools like STIG Viewer, SCAP Compliance Checker, Nessus/ACAS, JIRA for configuration management.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#LI-KA1
#M1

Ref: #851-Rockville-S1