PKI Security Administrator

Education Level: Bachelor’s degree in computers or other IT, Security related major; or equivalent experience

Experience Years: 9+ years’ relevant experience

• Support internal and external customers with certificate-related issues across USPS applications and services.
• Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
• Create reports and documentation using AI and other automation tools.
• Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
• Support certificate automation using Venafi/CyberArk TPP identifying opportunities to incorporate AI into automation efforts.
• Supervise the PKI team, develop project requirements for complex and critical applications, provides sound strategic advice, technical expertise, and guidance to program and project staff
• Ability to work independently, work in a fast-paced environment, and attention to detail, * Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.
• Familiarity with technologies such as VCERT, Portable Git, Ansible, and Visual Studio Code.
• Proficiency in PowerShell scripting.

• Strong understanding of Public Key Infrastructure (PKI) including:

• Certificate Authority Administration
• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring

Infrastructure experience in one or more of the following areas: IT or server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.

Strong communication skills with IT customers, developers, and system administrators.

Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).

Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.

Knowledge of Post Quantum Cryptography

Desired Skills:

• Experience with ServiceNow or other Change/Incident/Problem management ticketing technology

• IT system administration experience (systems management, networks, firewalls) in an enterprise environment
• Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
• Experience with Unix and Linux configuration and troubleshooting
• Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
• Proficiency with server virtualization technologies (VMWare, HyperV)
• Database administration (MSSQL) experience