About the Role
The PKI Certificate Authority Engineer is an expert-level professional responsible for providing high-level engineering support for all Public Key Infrastructure (PKI) services across Enterprise-class infrastructure. This position plays a vital role in optimizing, administering, and documenting all PKI systems, ensuring efficient management of digital certificates deployed by the Certificate Authority (CA). The engineer will collaborate with system owners, serving as the primary support entity for problem escalation and reporting directly to the section team lead. Broad knowledge and expert hands-on experience in a large enterprise environment are essential for success in this role.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
This position offers company-paid housing and transportation, a completion bonus, and a tuition reimbursement program. Note: You must satisfy all host country requirements to legally work in the host country, including obtaining and maintaining a host nation visa and driver’s license.
Responsibilities
- Operate and maintain Certificate Authority Servers, including databases and Hardware Security Modules (HSMs) on NIPR, SIPR, and Coalition enclaves.
- Manage the CA life cycle, including generation, revocation, expiry, and updating to determine where each certificate is installed.
- Troubleshoot Active Directory Certificate Services, HSMs, Certificate Enrollment Web Services, Certificate Enrollment Policy Web Service, and Internet Information Services (IIS).
- Aid in defining and developing the strategic plan for PKI and assist in the implementation of PKI and other certificate-related technologies.
- Create and maintain system documentation for certificate-based technologies, including installation, configuration, and troubleshooting steps.
- Improve existing processes through solutions to recurring problems and enhancements to existing solutions or documentation.
- Perform other duties and assignments as assigned.
Qualifications
Security Clearance:
- The position requires an active Secret Clearance.
Education / Certifications:
- Bachelor’s Degree or equivalent experience preferably in Computer Science, MIS, IS, Engineering, or a related field.
- Candidates must adhere to DoD 8570.01M and maintain at least one (1) Baseline certification and one (1) Computing Environment (CE) certification. Baseline certifications cannot also serve as Computing Environment certifications.
Baseline Certifications may include:
- Cisco: CCNP: Certified Network Professional - Security
- CompTIA: CASP+ ce: Advanced Security Practitioner
- CompTIA: SecurityX ce
- GIAC: GCED: Certified Enterprise Defender
- GIAC: GCIH: Certified Incident Handler
- ISACA: CISA: Certified Information Systems Auditor
- ISC2: CCSP: Certified Cloud Security Professional
- ISC2: CISSP (or Associate): Certified Information Systems Security Professional
Computing Environment (CE) Certifications may include:
- Microsoft: Certified: Azure Database Administrator Associate
- Microsoft: 365 Certified: Enterprise Administrator Expert
- Microsoft: Certified: Azure Security Engineer Associate
- Microsoft: Certified: Azure Solutions Architect Expert
- Microsoft: MCPD: SharePoint Developer 2010
- Microsoft: MCSD: Certified Solutions Developer (Any)
- Microsoft: MCSE: Core Infrastructure
- Microsoft: MCSE: Database Management and Analytics
- Microsoft: MCSE: Productivity Solutions Expert
Experience:
- At least five (5) years of practical experience working with:
- MS Active Directory Domain Services
- MS Active Directory Certificate Services (AD CS)
- Public Key Infrastructure (PKI)
- Cryptography Standards
- Managing keystores (JKS, JCEKS, PKCS #12, Windows MSCS)
- Hardware security modules (HSMs)
- Key management services (KMS)
- Online Certificate Status Protocol (OCSP)
- Two-factor authentication (e.g., RSA, Smartcards (CAC))
- Understanding of FIPS 140-2 compliance and Standard Technical Implementation Guides (STIGs).
- Experience in a customer service-oriented company.
Skills & Technology Used:
- Proficient in using a computer, desktop or laptop.
- Proficient in Microsoft productivity software and email clients.
- Ability to troubleshoot servers and infrastructure equipment, assess networking requirements, provide solutions, and make accurate decisions under pressure.
- Excellent organizational, interpersonal, written, and verbal communication skills.
- Ability to perform comfortably in a fast-paced, deadline-oriented work environment and effectively manage multiple complex tasks simultaneously.
- Familiarity with MS Active Directory Domain Services, MS Active Directory Certificate Services (AD CS), Public Key Infrastructure (PKI), and Cryptography Standards.
Working Environment:
- The work environment is primarily indoors (95%) with some outdoor work (5%).
- The outdoor environment may exceed temperatures of 100°F. Candidates must be able to physically withstand extreme heat.
Physical Activities:
- Must be capable of lifting, pushing, and pulling items weighing up to 50 lbs.
- Must be capable of wearing Personal Protective Equipment (helmet and plated vest) which can weigh 25 to 40 lbs for extended periods.
