PKI Network Engineer

PKI Network Engineer PKI Network Engineer The Opportunity: Everyone knows security needs to be “baked in” to a system architecture, but you actually know how to bake it in. You can identify and implement ways to harden systems and reduce their attack surface. What if you could use your cyber engineering and architecture skills to design and build secure systems for Marine Corps clients? We’re looking for an engineer who can help create solutions for the Marine Corps that will stand up to even the most advanced cyber threats. Responsibilities Perform PKI Tier II troubleshooting on Marine Corps systems related to PKI‑specific incidents, including cryptographic logon, certificate validation, and domain controller certificates. Provide hardware and software technical support to operate, troubleshoot, and scale three separate forests (classified, unclassified and tactical), with separate infrastructure and services. Develop, deploy and configure Certificate Authority (CA) infrastructure and Certificate Validation Infrastructure (CVI). Leverage PKI subject matter expertise to resolve issues across all Marine Corps networks in collaboration with other service providers. Provide technical guidance to junior engineers and design support personnel. Offer alternatives and customize solutions to balance security and mission needs. Qualifications 4+ years of experience with IT systems administration or network engineering. Experience with MS Windows Server 2019 or later, PowerShell scripting, virtual machine infrastructure (VMware), storage area network (SAN), Cisco and Juniper network switching, load balancing, hardware security module (HSM), Active Directory, Axway, OCSP, Unix or Linux operating systems and server hardware. Ability to travel 15% of the time. Secret clearance (or eligibility to obtain). High school diploma or GED. Security+ CE or IAT Level II certification. Nice to have: Experience with Public Key Infrastructure (PKI) and tactical PKI training. Knowledge of Marine Corps Enterprise Network (MCEN) architecture and how PKI is integrated from the end‑user to service delivery points. Knowledge of BMC Remedy. Top Secret clearance. CASP or CISSP certification. MCSA certification in Windows Server 2008 or later. Compensation Salary range: $69,400.00 to $158,000.00 (annualized USD). This posting will close within 90 days from the posting date. Commitment to Non‑Discrimination: All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr Booz Allen Hamilton