Identity Management - Public Key Infrastructure Administrator
Caci•21h ago
BWD GERMANY STUTTGARTOnsite$82.7K–$173.9KFull-time
Top focus
Identity EngineerInfrastructure EngineerMl Infra EngineerManagement Consultant
Job Title: Identity Management - Public Key Infrastructure Administrator Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: Secret Employee Type: Regular-Long Term Assignment Percentage of Travel Required: Up to 10% Type of Travel: Local * * * The Opportunity: CACI is looking for and Identity Manger to lead the deployment, management and security of our enterprise identity and high-assurance public key infrastructure.
Bridge the critical gap between core directory services, network endpoints, and defense-grade hardware cryptography. The ideal candidate will secure and manage a robust root-of-trust framework utilizing enterprise-grade hardware security modules.
Ensure all identity lifecycles, directory provisioning, and certificate issuance remain highly secure, resilient, and compliant with defense-sector standards
Responsibilities
- Deploy and maintain Certificate Authorities (CAs) compliant with DoW space frameworks, ensuring rigorous lifecycle management of trusted roots and subordinate authorities.
- Configure, maintain, and manage high-assurance nCipher and Luna Hardware Security Modules (HSMs) to safeguard cryptographic keys and root materials.
- troubleshoot complex OCSP (Online Certificate Status Protocol) responders, CRL (Certificate Revocation List) distribution points
- AIA (Authority Information Access) extensions to guarantee seamless certificate validation pathways.
- Manage Active Directory structures and utilize Group Policy Objects (GPOs) to enforce strict security baselines, smart card login requirements, and certificate auto-enrollment across the enterprise.
- Author and configure specialized certificate templates, including DoW NPE Certificates for use with RDP, VOIP Phones, network devices, and ISE-related functions.
- Facilitate secure enterprise authentication and automated enrollment processes across all corporate and production endpoints.
- Monitor PKI health metrics, trust chain validity, and cryptographic performance to maintain zero-downtime infrastructure
Qualifications
- Required: Advanced capabilities in designing, troubleshooting, and enforcing complex enterprise Active Directory Group Policy Objects (GPOs).
- Proven experience operating and managing lifecycle infrastructure for Certificate Authorities specifically within the DoD Space or highly regulated federal environments.
- Direct, hands-on configuration and administration experience with nCipher and Thales/Gemalto Luna HSMs for key generation, storage, and backup.
- Comprehensive understanding of configuring and maintaining OCSP, CRL, and AIA pathways for real-time validation chains.
- Strong proficiency in building, deploying, and managing custom enterprise certificate templates in an Department of War (DoW) environment.
- Holistic mastery of asymmetric cryptography, key escrows, and trust chain architecture.
- Relevant industry certifications, including CISSP or CompTIA SecurityX Desired: Familiarity with Federal/DoD compliance standards, including STIGs, NIST SP 800-53, and FIPS 140-2/3.
- Strong scripting skills (such as PowerShell) for automating certificate monitoring, CRL updates, or Active Directory management tasks. - What You Can Expect: A culture of integrity.
- At CACI, we place character and innovation at the center of everything we do.
- As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
- An environment of trust.
- CACI values the unique contributions that every employee brings to our company and our customers - every day.
- You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
- A focus on continuous growth.
- Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
- Pay Range : There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications.
- Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
- We offer competitive compensation, benefits and learning and development opportunities.
- Our broad and competitive mix of benefits options is designed to support and protect employees and their families.
- At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
- The proposed salary range for this position is: $82,700 - 173,900 USD CACI is an Equal Opportunity Employer.
- All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran
- any other protected characteristic.
Required skills
Active DirectoryGroup PolicyCertificate AuthoritiesnCipherLuna HSMOCSPCRLAIAasymmetric cryptographyPowerShellCISSPCompTIA SecurityX