SME Systems Engineer (Cloud PKI)

GovCIO
Alexandria
Workplace: HybridFull timeUSD 135,000 - 172,000 annuallyFunction: IT Operations (Systems/Network Admin)Experience: 10+ yearsEducation: high_schoolSkills: ["Root cause analysis"]

Serve as a primary technical authority for ICAM modernization supporting the U.S. Coast Guard. Design and engineer secure, identity-centric access control frameworks across legacy and modern enterprise architectures, managing enterprise directories, federation, authentication, authorization, and SSO. Build Zero Trust identity principles, configure enterprise PKI and credentials, integrate access controls (MFA/SSO/PAM), and provide final escalation for PKI outages—based in Alexandria, VA (hybrid).

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
GovCIO
GovCIO
1 week ago

SME Systems Engineer (Cloud PKI)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Serve as a primary technical authority for ICAM modernization supporting the U.S. Coast Guard. Design and engineer secure, identity-centric access control frameworks across legacy and modern enterprise architectures, managing enterprise directories, federation, authentication, authorization, and SSO. Build Zero Trust identity principles, configure enterprise PKI and credentials, integrate access controls (MFA/SSO/PAM), and provide final escalation for PKI outages—based in Alexandria, VA (hybrid).
Location: Alexandria
Workplace: Hybrid
Employment Type: Full time
Job Function: IT Operations (Systems/Network Admin)
Seniority: Mid level

Key Responsibilities

  • •Lead modernization of legacy access controls into robust, secure ICAM solutions.
  • •Manage enterprise directories, federation, authentication, authorization, and SSO protocols.
  • •Architect identity lifecycles, user provisioning workflows, and privilege management controls.
  • •Design and deploy Zero Trust identity principles (NIST SP 800-207) and implement access controls including MFA, SSO, and PAM.
  • •Configure and manage enterprise-grade PKI systems, credentials, and authenticators, including DigiCert Platform and cloud HSMs, and act as final escalation for PKI outages.

Pay and Benefits

Salary: USD 135,000 - 172,000 annually

Key Requirements

  • •10+ years (or commensurate experience) supporting identity management and secure access control engineering.
  • •DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).
  • •Deep knowledge of federated identity concepts including SAML, OAuth, OIDC, and Active Directory/LDAP architecture.
  • •Hands-on experience with Smart Card/Common Access Card (CAC) authentication and PKI certificate validation.
  • •Must have an active Secret clearance.
Experience:10+ years
Education:High School
Skills:Root cause analysis
Certifications:DoD 8570 IAT Level IISecurity+ CECySA+Vendor-specific identity certifications
Languages:En-us
Tech Stack:Cloud Credential & PKICredential Management (CM)DigiCert PlatformHSMYubikeyNIST SP 800-207Zero TrustSAMLOAuthOIDCActive DirectoryLDAPSSOMFAPAMSmart CardCommon Access Card (CAC)PKIDigiCertSailPoint

Eligibility

Security Clearance:Secret

Company Brief

GovCIO
Provides IT modernization, cloud, cybersecurity, data analytics, and managed services to U.S. federal civilian and defense agencies, delivering technology solutions and mission support to improve government operations and security.
Industry: Professional Services
Growth: Established Company
Headquarters: Herndon, United States
WebsiteLinkedIn