Address
Form of workOBXtek is seeking a talented Senior Infrastructure Administrator to provide essential support to the Department of State Consular Affairs (CA) Bureau. As a pivotal member of the team, the Senior Infrastructure Administrator, also known as CAKMI Infrastructure Administrator, will play a crucial role within the Consular Affairs Key Management Infrastructure (CAKMI) team. This position is responsible for ensuring the encryption of Data at Rest for CA systems, making it a vital technical role requiring expertise in Linux and Windows administration and REST API development.
Responsibilities:
- Manage the CAKMI Environment by overseeing system administration for both Linux and Windows systems.
- Work within Windows Active Directory.
- Take the lead as System Administrator for the Thales Vormetric Data Security Managers (DSMs).
- Ensure the security compliance of the environment by coordinating with other security teams within the bureau to maintain up-to-date Anti-Virus software and OS patches.
- Develop REST API calls utilizing various programming languages for key management and encryption functions on CipherTrust Managers.
- Maintain High-Availability Clusters and conduct system backups of the Hardware Security Modules.
- Configure HSM preferences and ensure high availability of secondary/backup servers.
- Draft Deployment Plans, Firewall Rule Requests, and System Impact Analysis Requests.
- Perform software upgrades on HSMs and manage HSM users.
- Maintain System Security Plans and Information System Contingency Plans.
- Stay updated on NIST 800-37 and 53 controls/responsibilities specific to the CAKMI system.
CLEARANCE REQUIREMENT: Active Secret Clearance.
Education:
- Bachelor’s degree in computer science, Information Technology, Information Assurance, Cybersecurity, or related field.
Desired Certifications:
- CASP and/or CISSP certification.
- Security+.
- ITIL or other IT Service Management (ITSM) certifications such as ServiceNow.
Experience:
- 7+ years of hands-on system administration with a strong background in Linux.
- Proficiency with Windows and Windows Administration Tools (Remote Desktop Connection, Active Directory, etc.)
- Proficiency with Linux and Linux Tools (RHEL 7/8, Ansible, Satellite, RHV, Putty).
- Experience with REST Architecture and developing API calls.
- Proficiency in CURL, Python, and JSON software development is a plus.
- Familiarity with HSMs and working knowledge of Firewall rules, ports, and protocols.
- Experience with PKI accountable items (Tokens, PIV/PKI Cards, etc.).
- Ability to navigate an Enterprise Network using RDP.
- Familiarity with large-scale operational environments (patching, monitoring of CPUs, memory, disk utilization).
- Availability for work outside normal hours during routine maintenance windows.
- Strong oral and written communication skills.
- Experience with Office365, SharePoint, ServiceNow, and Confluence.
- Familiarity with Splunk or other monitoring tools such as Zabbix.
- Fluent knowledge of IT security as it relates to network, application, and database security throughout the OSI model.
- Fluent knowledge of data encryption.
- Experience with HSMs and Vormetric Data Security Platform is preferred but not required.
Secret
Headquartered in McLean, Virginia and founded in 2009, OBXtek is a fast-growing leader in the government contracting field. Our mission is Our People…Our Reputation. Our people are trained professionals who enhance our customers’ knowledge and innovation using technology, collaboration, and education.
We offer a robust suite of benefits including comprehensive medical, dental and vision plans, Flexible Spending Accounts, matching 401K, paid time off, tuition reimbursement plans and much more.
As a prime contractor for 93% of our current work, OBXtek pairs lessons learned across disciplines with industry standard quality practices such as CMMI-Dev Level III, ITIL, 6Sigma, PMI, and ISO. Our rapid growth has been recognized by INC500, the Washington Business Journal, and Washington Technology magazine.
OBXtek is an Equal Opportunity Employer and does not discriminate based on race, color, religion, sex, age, national origin, gender identity, disability, veteran status, sexual orientation or any other classification protected by federal, state or local law.
