SITEC - PKI Systems Administrator - MacDill AFB

Peraton requires Systems Administrators to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.  This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. 

The Successful Enterprise Public Key Infrastructure (PKI) Administrator applicant will have the following qualifications:

The candidate needs a solid understanding of client/server, networking, and internet technology fundamentals. Additionally, the candidate needs a strong background in the daily administration, implementation, lifecycle management, and operational support of Public Key Infrastructure across a multi-domain, multi-platform enterprise environment. Further responsibilities include performing problem-solving and incident troubleshooting at the Systems Administrator level, coupled with exceptional communication and technical writing skills.

The applicant must possess demonstrated technical proficiency in Microsoft Windows Server (2019/2022), Active Directory Certificate Services (ADCS), and associated client operating systems. The position requires a firm operational background in managing hybrid Certificate Authority (CA) platforms across Windows, Red Hat Enterprise Linux, and Cisco Identity Services Engine (ISE). The candidate will support an enterprise infrastructure spanning four distinct networks, including Online Certificate Status Protocol (OCSP) responders, physical Hardware Security Modules (HSMs), and certificate distribution services supporting over 85,000 globally separated users. The successful candidate must have a strong working foundation in certificate templates, revocation software, diagnostic utilities, and automation via PowerShell.

Key Responsibilities

• Certificate Authority Administration: Perform daily administrative maintenance, monitoring, and operational support for enterprise Certificate Authorities across Windows ADCS, Red Hat Enterprise Linux, and Cisco ISE.
• Certificate Lifecycle Management: Oversee end-to-end certificate issuance, renewal, revocation, and re-keying processes for enterprise systems, network infrastructure devices, web servers, and user authentication tokens.
• Certificate Template Management: Configure, maintain, and publish certificate templates catering to a diverse enterprise environment to support TLS/SSL, code signing, machine identity, and smart card enrollment.
• Revocation & Validation Infrastructure: Monitor and maintain the enterprise Online Certificate Status Protocol (OCSP) infrastructure and Certificate Revocation Lists (CRLs), ensuring high availability and validation accuracy.
• Hardware Security Module (HSM) Operations: Assist with routine health checks, administrative monitoring, and maintenance of physical HSM appliances deployed across primary and secondary data center nodes (Node 28 and Node 15), supporting the strategic migration of all enterprise CAs behind HSM backends.
• Identity & Smart Card Support: Deploy, support, and troubleshoot third-party Common Access Card (CAC) and middleware software (including ActiveClient and 90 Meter), resolving authentication and certificate enrollment errors.
• Third-Party PKI Integrations: Maintain and update third-party certificate validation and revocation software (such as Axway/Tumbleweed) and Network Device Enrollment Service (NDES) endpoints.
• Ecosystem Integration & Troubleshooting: Ensure seamless PKI integration across Active Directory, Kerberos, LDAPS, enterprise networking, mobile device management (Hypori/MobileIron), and virtualized server environments (vSphere).
• Incident & Ticket Management: Resolve Tier 2 and Tier 3 operational PKI incident tickets, performing root-cause analysis on certificate trust issues, expired tokens, and validation failures.
• Documentation & Compliance: Maintain operational standard operating procedures (SOPs), document configuration baselines, and ensure all PKI components adhere strictly to DoD STIG and zero-trust security mandates.

Shift Work: Willingness to support shift schedules, on-call rotations, and weekend maintenance windows as required.

Required Qualifications:

• Min 12 years with HS Diploma, 10 years AS/AA degree, 8 years with BS/BA degree
• A DoW TS/SCI clearance is required
• DoW 8570.01-M IAT II
• Must be DoW 8140 compliant under the Work Role Code 451 – System Administrator - Intermediate level or higher.
• Linux Red Hat experience is a plus.
• Practical experience in a Systems Administrator or PKI Administrator role supporting enterprise production environments.
• Hands-on experience administering Microsoft Windows Server 2019/2022 and Active Directory Certificate Services (ADCS).
• Operational experience supporting multi-platform CAs, with working knowledge of Red Hat Enterprise Linux and/or Cisco ISE.
• Familiarity with the installation, configuration, and health monitoring of OCSP responders and CRL distribution points.
• General understanding of Hardware Security Modules (HSMs) and their role in securing cryptographic root keys.
• Demonstrated experience with administrative scripting (PowerShell) for automated certificate reporting, monitoring, and maintenance.
• Solid understanding of networking protocols, TLS/SSL handshake negotiation, and authentication protocols (Kerberos, LDAPS).
• Previous experience supporting large-scale enterprise environments (supporting greater than 50,000 users).

Desired Qualifications:

• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Red Hat Certified System Administrator (RHCSA)
• VMware Certified Associate (VCA) or VMware Certified Professional (VCP)
• Cisco Certified Network Associate (CCNA)