Senior PKI Administrator - Certificate Authority Operations

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.

Dragonfli is seeking a Senior-Level PKI Security Admin / Subject Matter Expert to support Public Key Infrastructure (PKI) and Certificate Authority (CA) operations for a large federal agency. This fully remote role owns the day-to-day health of certificate services — from Certificate Authority administration and Active Directory Certificate Services (ADCS) monitoring to certificate lifecycle guidance for internal and external stakeholders — while driving automation and AI-assisted improvements across the PKI program. The ideal candidate brings 9+ years of relevant experience, deep hands-on expertise with Venafi and/or CyberArk TPP, Microsoft Certificate Authority, and Hardware Security Modules (HSMs), and is comfortable supervising a PKI team while advising program and project stakeholders on complex, mission-critical certificate issues.

This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.

Responsibilities:

• Support internal and external customers with certificate-related issues across the agency's applications and services.
• Provide guidance and training to key stakeholders on PKI lifecycle management, processes, and procedures.
• Create reports and documentation using AI and other automation tools.
• Review complex PKI and certificate-related issues, determine effective solutions, and recommend improvements to ensure efficient, reliable, and sustainable operations.
• Support certificate automation using Venafi/CyberArk TPP, identifying opportunities to incorporate AI into automation efforts.
• Supervise the PKI team, develop project requirements for complex and critical applications, and provide sound strategic advice, technical expertise, and guidance to program and project staff.
• Work independently in a fast-paced environment with strong attention to detail.

Must-Have:

• Bachelor's degree in computers, IT, or a Security-related field; or equivalent experience.
• 9+ years of relevant PKI/certificate management experience.
• Strong knowledge of REST API integration, Simple Certificate Enrollment Protocol (SCEP), and Microsoft AD auto-enrollment.
• Familiarity with VCERT, Portable Git, Ansible, and Visual Studio Code.
• Proficiency in PowerShell scripting.
• Strong understanding of PKI, including Certificate Authority Administration, Certificate Enrollment Web Service & Policy Web Service, and Active Directory Certificate Services (ADCS) monitoring.
• Infrastructure experience in one or more of: IT/server administration, networking, Active Directory/LDAP, Unix/Linux, virtualization, or access control administration.
• Strong experience with certificate management tools, preferably Venafi/CyberArk, Microsoft Certificate Authority, and Hardware Security Modules (HSMs).
• Heavy experience troubleshooting digital certificate issues, with an interest in advancing automation and AI-driven solutions.
• Knowledge of Post-Quantum Cryptography.
• Strong communication skills with IT customers, developers, and system administrators.

Preferred / Nice-to-Have:

• Experience with ServiceNow or other Change/Incident/Problem management ticketing technology.
• IT system administration experience (systems management, networks, firewalls) in an enterprise environment.
• Experience with directory technologies for authentication (LDAP, Active Directory).
• Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
• Experience with Unix and Linux configuration and troubleshooting.
• Experience with TLS/SSL-based technologies (F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.).
• Proficiency with server virtualization technologies (VMware, Hyper-V).
• Database administration (MSSQL) experience.
• Relevant training/certifications: A+, Network+, Security+, nCSE, Venafi/CyberArk Admin, Certified Encryption Engineer, CCENT, CCNA.

Technical Skills:

• Public Key Infrastructure (PKI) administration and Certificate Authority operations
• Certificate lifecycle management (issuance, renewal, revocation)
• Venafi / CyberArk TPP certificate automation
• Microsoft Certificate Authority & Active Directory Certificate Services (ADCS)
• REST API integration and PowerShell scripting
• SCEP and Microsoft AD auto-enrollment
• Hardware Security Modules (HSMs)
• Post-Quantum Cryptography awareness

Soft Skills:

• Strong stakeholder communication and training/mentorship ability
• Independent, self-directed work style in a fast-paced environment
• Attention to detail and structured problem-solving
• Team supervision and technical leadership
• Ability to translate complex technical issues into clear guidance for non-technical stakeholders

• Medical — Multiple POS health plan options including an HSA-compatible plan
• Dental — PPO coverage for preventive, basic, and major services
• Vision — Annual exam, frames, lenses, and contact lens allowance
• 401(k) — Employer match up to 5% of eligible compensation
• Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings
• Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each
• PTO — 15–25 days annually based on tenure
• Paid Federal Holidays — All 11 federal holidays observed