Engineer (IdM/PKI Services)

工作内容

Overview

Systems Planning and Analysis, Inc. (SPA) is a well-established and progressive defense contracting company in the Northern Virginia area just a few miles south of the Pentagon. We are a professional services firm established in 1972 that has a long-standing reputation for unrivaled technical and analytical support to some of the top decision makers in the Federal Sector. We do state of the art work and have a cadre of outstanding professionals on our team.

SPA has an immediate need for a Engineer (IdM/PKI Services)

Responsibilities

• Manage the NATO wide NPKI Registration Authorities;
• Maintain the day-to-day NATO wide PKI systems and components;
• Manage and control of the lifecycle of end users and devices certificates;
• Manage NPKI virtualize infrastructure; NPKI networking components and NPKI hardware infrastructure;
• Manage the NPKI LDAP directory service and support HTTP service;
• Responsible for the NCIA ITSM ticketing system;
• Responsible for WNES- auto enrolment service, CSR SCEP;
• Enrolment over Secure Transport (EST); Entrust Administration Services components especially in context of ITM and NPKIMitigation projects new services development and deployment;
• Responsible for Enterprise Mobile Mobility configuration, integration, maintenance;
• Responsible for LDAP directory service configuration and maintenance;
• Responsible for Online Certificate Status Protocol (OCSP) and Time Stamp management;
• Responsible for Database maintenance, dedicated for NPKI;
• Responsible Card Management System deployment, integration and day-to-day management;
• Responsible for Hardware Security Module (HSM) firmware upgrade and management in different Date Centre location;
• Responsible for the creation of PKI related guidance;
• Certificate Authority Log analysis, (Troubleshoot the system ALARM/ERRORS and monitor user activity);
• Support Smart Card enrolment and certificate creation process;
• Maintain the day-to-day operations /management /backup/restore of the PKI systems;
• Provide technical support and assistance to ITM Operating Authorities and NPKI-Mitigation project team;
• Provide 2nd and 3rd level technical support of CIS services to the NPKI customers;
• Designing of new PKI components;
• Responsible for the creation and maintenance of Standard Operating Procedures within the NPKI as part of modifications or additions to current capabilities;
• Documenting of all new PKI services;
• Installation and maintenance of NPKI components;
• Be flexible to work outside normal office hours in response to crises, operational requirements;
• Performs other duties as may be required
  

Qualifications

Required Qualifications:

• A university degree in a relevant discipline and 3 years of specific experience
• Extensive knowledge of modern communication and Internet Protocol (IP) based networking technologies and systems including security aspects.
• 3 years extensive experience with PKI System development, design, management.
• Extensive knowledge of Information security and Cryptography (symmetric and asymmetric encryption, public key infrastructure (PKI) encryption, public key encryption, hash functions, digital signatures, digital certificates).
• Practical experience in Windows Servers, RHEL and VMware system administration
• Working knowledge of router and switches configuration
• Knowledge of the principles of computer and communications security, networking, and vulnerabilities of modern operating systems and applications.
• Experience with SQL database administration.
• Extensive experience in operating systems backup and restore.
• Practical experience in scripting (Python, Powershell).
• Practical experience in SSL, TLS, and OpenSSL.
• National of one of the 30 NATO countries
• In possession of an active National and/or NATO Cosmic Top Secret security clearance
  

Desirable Qualifications

• VMware (VCA, VCP) and Linux RHEL system administration
• CISCO CCNA
• Microsoft Certified Solution Associate (MCSA)
• Microsoft Certified Solutions Expert (MCSE)
• Experience in development and implementation of computer security policies