Navy Certificate Validation Infrastructure System Administrator

Job Title: Navy Certificate Validation Infrastructure System Administrator

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 25%

Type of Travel: Continental US

* * *

The Opportunity:
Join CACI as a Technical Lead supporting critical Navy communication, cybersecurity, and identity management programs. In this role, you will lead our technical delivery team for the Navy Certificate Validation Infrastructure (NCVI), a vital cybersecurity program that ensures secure, cryptographically validated network authentication and Cryptographic Logon (CLO) enablement across Navy afloat, submarine, and tactical/shore-based enclaves (such as CANES, ISNS, NMCI, and ONE-Net).

As the NCVI Technical Lead, you will combine high-level public key infrastructure (PKI) systems engineering with direct operational team management. You will serve as the principal liaison to our government clients at the Naval Information Warfare Center Atlantic (NIWC LANT), driving PKI compliance, managing system validation processes, overseeing Local Registration Authority (LRA) functions, and coordinating response initiatives for fleet cryptographic casualties (CASREPs).

Responsibilities:

• NCVI Systems & Cryptographic Administration:
• Oversee the installation, configuration, and engineering maintenance of Validation Authorities (VA), validation servers, and Online Certificate Status Protocol (OCSP) / Certificate Revocation List (CRL) responders.
• Lead system administration (hardware, OS, and network virtualization) of hosting systems within Consolidated Afloat Networks and Enterprise Services (CANES) or tactical server environments, managing secure baselines for Red Hat Enterprise Linux (RHEL) and Windows Server instances.
• Manage Trust Anchor and Root/Intermediate Certificate Authority (CA) chains (including DISA, NSS, and DoD-approved External CAs) within Navy environments.
• Audit, Compliance & Security Support:
• Coordinate and track Joint Force Headquarters Department of Defense Information Network (JFHQ-DODIN) PKI Audit compliance.
• Conduct and analyze ACAS (Nessus) vulnerability scans, apply operating system patches, and enforce DISA Security Technical Implementation Guides (STIGs) across the NCVI infrastructure.
• Maintain system backups, review workstation security logs, and secure PKI archives in accordance with DoD standards.
• Fleet Reporting & Knowledge Management:
• Host and drive weekly SIPR PKI conference and data calls with DoD stakeholders to address systemic validation issues.
• Produce daily operational reports, fleet security bulletins, Standard Operating Procedures (SOPs), and technical knowledge base articles to ensure continuous service improvement.
• Support the fleet as the ultimate technical escalation point for high-priority cryptographic failures and token login outages.

Qualifications:

Required:

• Clearance: Active DoD Secret security clearance at the time of hire, with the ability to obtain and maintain a Top Secret/SCI clearance.
• Education: Bachelor's degree in Cybersecurity, Systems Engineering, Computer Science, Information Technology, or a related STEM field. An equivalent combination of technical military training, Associate's degree, and progressive IT experience may be considered in lieu of a degree.
• Minimum of 8-10 years of experience in systems administration, network engineering, or cybersecurity, with at least 3 years executing technical leadership, team management, or lead engineering tasks.
• Minimum of 2 years of hands-on experience in DoD/Navy PKI operations, directory services (Active Directory/LDAP), or Common Access Card (CAC) / smart card enabling technologies.
• DoD 8570/8140 Baseline: Active IAT Level II baseline certification (e.g., CompTIA Security+ CE, GSEC, SSCP) or higher.
• Computing Environment (CE): A professional computing environment certification (e.g., RHCSA, Microsoft Certified Windows Server Hybrid Administrator, Linux+, or VMware Certified Professional) or the ability to obtain one within 180 days of hire.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Pay Range :

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:
$71,500 - $150,200

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.