<p>Kforce's client is seeking an experienced Senior PKI Adminstrator in SLC for a hybrid role.</p> <p>Responsibilities:</p> <ul> <li>Oversee the operation and maintenance of PKI systems, ensuring their availability, reliability, and security </li><li>Providing Technical leadership, guidance, and mentorship to junior team members, ensuring best practices in PKI implementation and fostering a culture of continuous improvement and innovation </li><li>Handling the issuance, renewal, and revocation of digital certificates </li><li>Ensuring proper lifecycle management of certificates </li><li>Installing and maintaining CA applications </li><li>Providing input on forecasting business needs and budgeting in support of PKI Operations </li><li>Remaining current with technology and industry/market trends and apply to the design and management of PKI systems </li><li>Working knowledge of PKI systems including certificate authority (CA) services, key storage mechanism and hardware security modules (HSMs), validations services such as on-line certificate status protocol (OCSP), certificate revocation lists (CRL) and various deployment methods, i.e., LDAP, HTTP, etc. </li><li>Assisting with maintaining Business Continuity Planning (BCP) and testing plans to ensure redundancy and recoverability </li><li>Coordinating with System Administrators and Developers in the development/implementation/changes related to CA applications </li><li>Working with cybersecurity teams to implement and improve PKI security measures, ensuring compliance with industry standards and best practices </li><li>Ensuring PKI systems comply with relevant data privacy and protection frameworks </li><li>Developing and maintaining comprehensive documentation for PKI processes, procedures, and configurations </li><li>Supporting the on-going maintenance of a quality assurance review process of key life cycle events and ceremonies </li><li>Supporting efforts to provide direction towards the achievement of department goals and objectives* College degree is preferred but experience will weigh out </li><li>Experience Linux </li><li>Experience in Windows </li><li>Experience in PKI - at certificate authority (like Identrust/DMV of internet - validate and establish trust between websites) </li></ul> <p>Experience with:</p> <ul> <li>CRL/CSP - validation components of certs </li><li>Knowledge of for most part - know anatomy of certificates </li><li>Machine identification management would be ideal - Venafi - can teach this part </li><li>Procedure and adherence to compliance </li><li>Cryptic Graphic solutions </li><li>HSM - hardware security modules - specialized servers </li></ul>