PKI Systems Engineer

PKI Systems Engineer

Job ID: 2618480

Location: Springfield, VA, United States

Date Posted: Oct 28, 2026

Category: Information Technology

Subcategory: IT Systems Engineer

Schedule: Full-Time

Shift: Day Job

Travel: No

Minimum Clearance Required: None

Clearance Level Must Be Able to Obtain: Top Secret

Potential for Remote Work: Hybrid

Benefits: Click here

Share: mail

Apply Now >

Apply Now >

Job Description

Description

The Enterprise & Mission Solution Business Unit currently has an opening for a Public Key Infrastructure (PKI) Systems Engineer to support the Department of State (DoS) Bureau of Diplomatic Technology (DT) PKI program. This program provides transparent security services in support of the Department's goals to secure communications among Department staff and systems. The position falls under the "Vanguard 2.2.1" contract.

This is a senior-level PKI engineering position within the Vanguard 2.2.1 program's Enterprise Engineering Office (EEO), providing PKI engineering and integration support, administering, maintaining, and deploying various PKI systems based on Entrust solutions, onsite at the various DoS Datacenters and at certain selected DoS domestic and overseas locations. The preferred candidate must possess strong skills in designing, installing, configuring, and maintaining PKI systems. Additionally the preferred candidate should have some experience in providing tier-3 level support in large enterprises.

This role requires at least 4 days/week onsite in Springfield, VA.

Description of Duties:

• Providing PKI engineering support in the operation of a number of PKI systems deployed at the Department of State.
• Manage and maintain enclaved server hardware, storage, switches, server operating systems, and Hardware Security Modules (HSMs).
• Directly working with customer to analyze requirements and then deploy security related solutions to meet those requirements.
• Providing problem analysis following any service issues to prevent recurrence
• Performing product evaluations and making product recommendations
• Identifying security risks to systems and suggest mitigations
• Developing test cases for software/hardware testing and developing test evaluation reports for stakeholders.
• Developing and updating systems documentation (e.g., ConOps, Operating procedures, systems architecture documents)

Qualifications

Required Education/Experience:

• Bachelor''s degree and 9+ years of relevant work experience; Master''s degree and 7+ years of relevant work experience; may accept additional experience in lieu of degree.
• Excellent MS-Windows Server administration & maintenance
• Familiarity with PKIs and related technologies (LDAP directories, HSMs, OCSP) and security practices
• Excellent oral and written communication skills
• Excellent analytical and troubleshooting skills
• Working knowledge of Entrust suite of PKI products (Security Manager, Administration Services, Security Manager Proxy) especially in a government setting.
• Hands-on experience with Hardware Security Modules (HSMs)
• Experience with directory products (LDAP), such as Critical Path or Active Directory
• CISSP, Security+, or similar certification
• Network device configuration - Cisco and Juniper firewalls and switches
• Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)
• Virtualization technologies (ESX/ESXi)
• Working knowledge of External storage solutions
• Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.

Required Clearance:

• US Citizenship.
• Ability to obtain top secret clearance. Must obtain interim top secret prior to starting work.

Desired Experience/Skills/Attributes:

• Working knowledge of Entrust suite of PKI products (Security Manager, Administration Services, Security Manager Proxy) especially in a government setting.

• Hands-on experience with Hardware Security Modules (HSMs)

• Experience with directory products (LDAP), such as Critical Path or Active Directory

• CISSP, Security+, or similar certification

• Network device configuration - Cisco and Juniper firewalls and switches

• Network infrastructure diagnostics (TCP/IP general networking knowledge, network monitoring tools)

• Virtualization technologies (ESX/ESXi)

• Working knowledge of External storage solutions

• Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.

Overview

SAIC accepts applications on an ongoing basis and there is no deadline.

SAIC is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

Share: mail

Apply Now >