Lead PKI Network Engineer
EOE StatementWe are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.DescriptionAveningTech is seeking a Lead PKI Network Engineer to support the Marine Corps Cyber Operations Group (MCCOG) Public Key Infrastructure (PKI) contract. This role provides technical expertise for concept exploration, requirements development, implementation, and enhancement of DoD PKI and USMC capabilities, and will work out of Quantico in VA (100% onsite).Primary Responsibilities:PKI Network Operations-Serve as the Network SPOC, providing technical oversight and guidance to PKI Network Operations staff.Maintain resilient certificate issuance and revocation infrastructure across MCEN networks.Ensure Marine Corps PKI requirements are integrated into future DoD PKI architecture.Support assessments of USMC impacts from DoD PKI PMO activities, including mobile device PKI and non-person entity issuance.Troubleshoot and resolve PKI-related issues (certificates, tokens, infrastructure services).Perform user account management, PKI system backups, and disaster recovery tasks.Support SIPRNET Token Management System (TMS) and lead systems administration for DoN PKI.Training and Outreach-Develop and deliver PKI Tactical Training Plans and materials for garrison and tactical networks.Configure and maintain PKI Tactical training suites using hypervisor technology.Provide training courses for deploying Marines, including PKI 101, CVI, Cryptographic Logon, PKI Administration, and Troubleshooting.Hardware Security Module (HSM) Support-Develop and maintain HSM-related training plans and materials.Configure and operate HSM training suites and deliver courses for deploying Marines.Certificate Authority (CA) Support-Provide technical support for Microsoft Active Directory, DoD PKI, and other CA technologies.Deploy and configure new Certificate Authorities per DoD security standards.Monitor CA health, publish Certificate Revocation Lists, and perform Tier III troubleshooting.Develop and maintain CA disaster recovery and COOP plans.Certificate Validation Infrastructure (CVI) Support-Support CVI technologies, including OCSP, Desktop Validator, and Enterprise Validation Authority.Deploy and maintain CVI software and configurations across USMC networks.Monitor CVI health and perform Tier III troubleshooting.Further support as necessary in the following areas: Tier III PKI issues, public key enabling, configuration management, PKI system infrastructure, virtual infrastructure, SAN, server management, event management, etc.Position RequirementsBachelor's degree in a relevant field and 7+ years of professional experience in Network Operations. Additional professional or military experience may be considered in lieu of degree.Active DoD Top Secret clearance with SCI eligibilityAbility to obtain a favorable adjudication on a T5 investigationDoD/NSS and Only-Locally-Trusted PKI Operations and Maintenance experienceStrong verbal and written communication skillsExperience using networked computer-based systems and the Microsoft Windows operating systemAbility to work independently and demonstrate strong analytical skillsCISSP or equivalent certificationAbility to motivate teams, produce quality work under tight timeframes, and manage multiple projects simultaneouslyWillingness to work a flexible scheduleAbility to stand, walk, sit, use hands, reach, climb stairs, balance, stoop, kneel, crouch, or crawl as requiredAbility to occasionally lift or move up to 25 poundsFull-Time/Part-TimeContingentTravel RequiredNoneClearance RequiredTop SecretPositionLead PKI Network EngineerNumber of Openings1Exempt/Non-ExemptNon-ExemptOpen Date4/20/2026This position is currently accepting applications.