Senior PKI Administrator - Certificate Authority Operations

Description

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.

Dragonfli is seeking a Senior-Level PKI Security Admin / Subject Matter Expert to support Public Key Infrastructure (PKI) and Certificate Authority (CA) operations for a large federal agency. This fully remote role owns the day-to-day health of certificate services — from Certificate Authority administration and Active Directory Certificate Services (ADCS) monitoring to certificate lifecycle guidance for internal and external stakeholders — while driving automation and AI-assisted improvements across the PKI program. The ideal candidate brings 9+ years of relevant experience, deep hands-on expertise with Venafi and/or CyberArk TPP, Microsoft Certificate Authority, and Hardware Security Modules (HSMs), and is comfortable supervising a PKI team while advising program and project stakeholders on complex, mission-critical certificate issues.

This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.
Responsibilities:

- Support internal and external customers with certificate-related issues across the agency's applications and services.

- Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.

- Create reports and documentation using AI and other automation tools.

- Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.

- Support certificate automation using Venafi/CyberArk TPP, identifying opportunities to incorporate AI into automation efforts.

- Supervise the PKI team, develop project requirements for complex and critical applications, and provide sound strategic advice, technical expertise, and guidance to program and project staff.

- Work independently in a fast-paced environment with strong attention to detail.

Requirements
Must-Have:

- Bachelor's degree in computers, IT, or a Security-related field; or equivalent experience.

- 9+ years of relevant PKI/certificate management experience.

- Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.

- Familiarity with VCERT, Portable Git, Ansible, and Visual Studio Code.

- Proficiency in PowerShell scripting.

- Strong understanding of PKI, including Certificate Authority Administration, Certificate Enrollment Web Service & Policy Web Service, and Active Directory Certificate Services (ADCS) monitoring.

- Infrastructure experience in one or more of: IT/server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.

- Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).

- Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.

- Knowledge of Post-Quantum Cryptography.

- Strong communication skills with IT customers, developers, and system administrators.

Preferred / Nice-to-Have:

- Experience with ServiceNow or other Change/Incident/Problem management ticketing technology.

- IT system administration experience (systems management, networks, firewalls) in an enterprise environment.

- Experience with directory technologies for authentication (LDAP, Active Directory).

- Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.

- Experience with Unix and Linux configurat