PKI Cybersecurity Lead

Position Summary

The PKI Cybersecurity Lead is responsible for overseeing the planning, implementation, and management of enterprise Public Key Infrastructure solutions and services. This leadership role ensures the secure issuance, validation, and revocation of digital certificates to support authentication, encryption, and digital signature services across the organization.

Key Responsibilities

• Lead and manage the design, deployment, and lifecycle support of PKI and certificate-based authentication solutions.
• Develop and enforce PKI governance, policies, and procedures in compliance with applicable regulations (e.g., DoD, NIST, FISMA, FIPS 140-3).
• Oversee Certificate Authorities (CAs), Registration Authorities (RAs), and related infrastructure including HSMs and OCSP/CRL services.
• Manage a team of PKI engineers, Registration Authority personnel, and contractors, providing guidance and mentorship.
• Cook up with security, network, and identity management teams to ensure seamless integration of PKI with enterprise systems.
• Serve as the subject matter expert (SME) on cryptographic services, certificate management, and digital identity assurance.
• Conduct risk assessments and audits of cryptographic solutions; respond to findings with remediation plans.
• Support incident response efforts involving compromised or misused certificates.
• Maintain documentation, SOPs, key management plans, and business continuity strategies for PKI services.
• Provide technical expertise for the procurement, configuration, and lifecycle of PKI tools and platforms (e.g., Microsoft ADCS, Venafi, Keyfactor, Entrust).

Required Qualifications

• A Secret Clearance; must be a US Citizen
• Favorable Adjudicated Tier 5 Level Investigation
• A current DoD/DISA ACAS Training Certification
• Experience with DoD/NSS and Only-Locally - Trusted PKI Operations, Maintenance, Cybersecurity, DoD/NSS PKI Compliance, and DoD/USMC Risk Management Framework
• A CISSP certification