PKI Administrator

Looking for an MS ADCS Administrator with HSM and KMS experience.

This role will be responsible for the design, implementation, maintenance and improvements of Microsoft Active Directory Certificate services in a 20000 user Enterprise environment. Additional responsibilities include providing enterprise level Active Directory support and other facets of identity management.

Essential Duties and Responsibilities

• Maintain, upgrade and monitor MS ADCS and related components like KMS and HSM
• Be the SME for any PKI related questions beyond MS ADCS.
• Manage Active Directory Domain Controllers
• Investigate and apply remediations for detected vulnerabilities as applicable.
• Setup and respond to standardized alerts, perform regular log analysis, monitor and maintain systems to identify any issues.  Maintain overall system health to maximize system uptime and ensure delivery of service level objectives.
• Work with other SMEs to resolve application problems. Provide support for restoration of service and perform root cause analysis.
• Respond to Tier2 and Tier3 customer support tickets and requests. Provide on-call support, assist project, development, security, and operations teams as required.
• Develop, document, and implement PowerShell scripts for efficient management of the PKI and Active Directory environment and recurring report requests.
• Provide technical consultation on current and proposed systems to other departments and clients. Knowledge transfer to other non-SME’s within the team.
• After hours support may be required due to operational tempo.  Candidate should expect to participate in on-call support and be available for short notice call in.
• Develop documentation for assigned projects including installation guides, troubleshooting guides, procedures, etc.
• Keep abreast of the latest developments in the industry and guide project teams to follow industry best practices.

Skills/Experience Requirements

• Five+ years of MS ADCS experience with expert level troubleshooting skills. This includes NDES and SCEP deployments and integrating with Intune.
• Five+ years of HSM / KMS experience.

• Expert level understanding of Cryptography and PKI.
• Expert level understanding of Personal Identity Verification (PIV) cards and Virtual Smart Cards including integrating with identity directories for MFA.
• Five+ years of domain admin / enterprise admin level operational expertise of AD
• Experience with administration of IAM in Azure and/or AWS.
• Knowledge of Network, Firewalls, Load Balancers, DNS desired.
• Ability to work independently and within a team environment absolutely necessary.
• Excellent communication and customer service skills

Education Requirements

Bachelor’s degree in information technology or equivalent experience