PKI Cybersecurity Lead with Security Clearance

PKI Cybersecurity Lead Position Summary: The PKI Cybersecurity Lead is responsible for overseeing the planning, implementation, and management of enterprise Public Key Infrastructure solutions and services. This leadership role ensures the secure issuance, validation, and revocation of digital certificates to support authentication, encryption, and digital signature services across the organization. The ideal candidate will be an expert in certificate lifecycle management, HSMs, cryptographic policies, and compliance with federal or industry standards such as NIST, FIPS, and DoD PKI guidelines. Key Responsibilities: Lead and manage the design, deployment, and lifecycle support of PKI and certificate-based authentication solutions.
Develop and enforce PKI governance, policies, and procedures in compliance with applicable regulations (e.g., DoD, NIST, FISMA, FIPS 140-3).
Oversee Certificate Authorities (CAs), Registration Authorities (RAs), and related infrastructure including HSMs and OCSP/CRL services.
Manage a team of PKI engineers, Registration Authority personnel, and contractors, providing guidance and mentorship.
Coordinate with security, network, and identity management teams to ensure seamless integration of PKI with enterprise systems.
Serve as the subject matter expert (SME) on cryptographic services, certificate management, and digital identity assurance.
Conduct risk assessments and audits of cryptographic solutions; respond to findings with remediation plans.
Support incident response efforts involving compromised or misused certificates.
Maintain documentation, SOPs, key management plans, and business continuity strategies for PKI services.
Provide technical expertise for the procurement, configuration, and lifecycle of PKI tools and platforms (e.g., Microsoft ADCS, Venafi, Keyfactor, Entrust). Required Qualifications: Secret Clearance; must be a US Citizen
Favorable Adjudicated Tier 5 Level Investigation
Current DoD/DISA ACAS Training Certification
Experience with DoD/NSS and Only-Locally - Trusted PKI Operations, Maintenance, Cybersecurity, DoD/NSS PKI Compliance, and DoD/USMC Risk Management Framework
CISSP