Senior PKI Adminstrator

RESPONSIBILITIES:
Kforce's client is seeking an experienced Senior PKI Adminstrator in SLC for a hybrid role.

Responsibilities:
* Oversee the operation and maintenance of PKI systems, ensuring their availability, reliability, and security
* Providing Technical leadership, guidance, and mentorship to junior team members, ensuring best practices in PKI implementation and fostering a culture of continuous improvement and innovation
* Handling the issuance, renewal, and revocation of digital certificates
* Ensuring proper lifecycle management of certificates
* Installing and maintaining CA applications
* Providing input on forecasting business needs and budgeting in support of PKI Operations
* Remaining current with technology and industry/market trends and apply to the design and management of PKI systems
* Working knowledge of PKI systems including certificate authority (CA) services, key storage mechanism and hardware security modules (HSMs), validations services such as on-line certificate status protocol (OCSP), certificate revocation lists (CRL) and various deployment methods, i.e., LDAP, HTTP, etc.
* Assisting with maintaining Business Continuity Planning (BCP) and testing plans to ensure redundancy and recoverability
* Coordinating with System Administrators and Developers in the development/implementation/changes related to CA applications
* Working with cybersecurity teams to implement and improve PKI security measures, ensuring compliance with industry standards and best practices
* Ensuring PKI systems comply with relevant data privacy and protection frameworks
* Developing and maintaining comprehensive documentation for PKI processes, procedures, and configurations
* Supporting the on-going maintenance of a quality assurance review process of key life cycle events and ceremonies
* Supporting efforts to provide direction towards the achievement of department goals and objectives

REQUIREMENTS:
* College degree is preferred but experience will weigh out
* Experience Linux
* Experience in Windows
* Experience in PKI - at certificate authority (like Identrust/DMV of internet - validate and establish trust between websites)

Experience with:
* CRL/CSP - validation components of certs
* Knowledge of for most part - know anatomy of certificates
* Machine identification management would be ideal - Venafi - can teach this part
* Procedure and adherence to compliance
* Cryptic Graphic solutions
* HSM - hardware security modules - specialized servers

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.