Senior PKI Security Administrator

Title: PKI Security Admin (Senior Level/SME)                                                        

PCTS: Project # and Name: 125434 - Boundary Protection Services (BPS)                                                            

Task description and/or any specific requirements:

Education Level: Bachelor’s degree in computers or other IT, Security related major; or equivalent experience                                   

Experience Years: 9+ years’ relevant experience

• Support internal and external customers with certificate-related issues across USPS applications and services.
• Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
• Create reports and documentation using AI and other automation tools.
• Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
• Support certificate automation using Venafi/CyberArk TPP identifying opportunities to incorporate AI into automation efforts.
• Supervise the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff
• Ability to work independently, work in a fast-paced environment, and attention to detail

Required Skills:   

• Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.
• Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code.
• Proficiency in PowerShell scripting.
• Strong understanding of Public Key Infrastructure (PKI) including:
• Certificate Authority Administration
• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring
• Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.
• Strong communication skills with IT customers, developers, and system administrators.
• Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).
• Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.
• Knowledge of Post Quantum Cryptography

Desired Skills:   

• Experience with ServiceNow or other Change/Incident/Problem management ticketing technology

• IT system administration experience (systems management, networks, firewalls) in an enterprise environment
• Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
• Experience with Unix and Linux configuration and troubleshooting
• Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
• Proficiency with server virtualization technologies (VMWare, HyperV)
• Database administration (MSSQL) experience

Desired Training:   

A+, NET+, SEC+, nCSE, Venafi/CyberArk Admin, certified encryption engineer, CCENT, CCNA