pki jobs in San Diego

Design, deploy, and maintain enterprise Windows Server infrastructure with expertise in Active Directory, authentication systems (Kerberos, RADIUS, PKI), and DoD-compliant hardening (STIGs, CIS, Zero Trust). Develop Infrastructure-as-Code automation using PowerShell, Python, and Ansible across Windows and Linux environments, manage SCCM/MECM patch deployment and WSUS, and architect virtualized environments on KVM and EC2.…See more Mentor engineering teams on system integration, security, and cross-domain interoperability, and collaborate with cybersecurity, network, and Linux teams to solve complex enterprise deployment challenges.

SAIC seeks a Principal Cybersecurity Engineer to design, implement, and maintain secure identity, cryptographic, and network infrastructure for classified Navy DoD systems. The role involves planning and executing penetration tests and red team exercises against classified systems, performing network traffic analysis with Wireshark, architecting air-gap systems and data diodes, hardening IT and virtualized environments, and conducting vulnerability assessments aligned with DISA STIGs and DoD standards.…See more Required: 9+ years cybersecurity engineering, 5+ years hands-on experience in classified/high-security environments, proven penetration testing and red team experience, and deep knowledge of DoD/IC security frameworks (NIST RMF, DISA STIG, DoD CC SRG). Must hold an active TS/SCI clearance and be a U.S. citizen.

The Systems Administrator II maintains and supports IT infrastructure integrity, availability, and performance for a DoD contract environment. Key responsibilities include Active Directory administration (ADUC, DNS, GPO, WSUS), PKI credential management, system maintenance, software/hardware upgrades, troubleshooting, and compliance monitoring via DISA STIGs.…See more The role requires a Bachelor's degree in IT or related field, 3+ years of relevant experience, and an IAT Level II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).

Serve as a primary administrator for core security technologies including Microsoft Defender Suite, Entra ID, Conditional Access, and endpoint protection, while also administering enterprise infrastructure across Microsoft 365, Azure, AWS, VMware, and hybrid platforms. Troubleshoot complex infrastructure and security issues, manage cloud backup and disaster recovery, monitor alerts through LogicMonitor and SIEM/MDR/SOCaaS services, and coordinate with security operations teams on investigations and remediation.…See more Requires 8+ years of hands-on experience in cybersecurity and infrastructure engineering in business-critical environments, with deep expertise in Microsoft identity and security technologies, cloud platforms, vulnerability management, and enterprise backup solutions. Participate in after-hours support and escalation activities as needed.

Enterprise IT Systems Engineer supporting mission-critical Department of Defense environments with 12+ years of experience designing and administering secure, scalable infrastructure. Responsibilities include managing Microsoft Active Directory, PKI, enterprise backup/disaster recovery, storage area networks, Hyper-Converged Infrastructure, and virtualization platforms (VMware, Kubernetes, Docker).…See more Must demonstrate expertise in DoD cybersecurity compliance (RMF, STIGs), cloud services (Office 365, IaaS/PaaS), and secure system technologies including encryption, VDI, and VoIP. Requires TS/SCI clearance and ability to obtain DoD 8570.11 IAT Level II certification within 30 days.

Design and own network security across Saronic's enterprise, on-premises, cloud, and maritime vessel communications infrastructure. Responsibilities include managing firewalls, segmentation, VPN/ZTNA, and wireless systems (Palo Alto, Cisco, Aruba); securing AWS VPC architecture in commercial and GovCloud; architecting secure vessel communications over cellular, RF, SATCOM, and mesh links with cryptographic key management; and building network observability and automation at scale.…See more Requires 5+ years of hands-on enterprise network security experience, production firewall and VPN operations, L3-L7 networking fundamentals, and the ability to obtain a U.S. security clearance.

SRC seeks a mid-level platform engineer with 5+ years of CANES experience and 5+ years in IT systems design/integration to analyze existing OpenShift cluster deployments and design solutions addressing identified gaps. The role involves creating Ansible automation to integrate OpenShift clusters with CANES network, identity, and PKI services; performing on-platform installation, configuration, and troubleshooting; and authoring technical documentation.…See more The engineer will work autonomously to identify technical limitations, test solutions, and propose technology improvements while optionally mentoring junior team members.

SAIC seeks a Cloud DevOps Engineer to design, build, and operate mission-critical cloud infrastructure on AWS and Kubernetes/OpenShift platforms in support of Naval Operational Architecture. The role combines infrastructure-as-code (CloudFormation, YAML), container orchestration, Linux/Windows server administration, networking, scripting (Bash, Python, PowerShell), and cybersecurity hardening (STIGs, ACAS).…See more You will work across cyber, networking, and development teams to deliver resilient, secure, and highly available cloud environments while maintaining compliance and system uptime.

The Cybersecurity PKI Engineer will develop and maintain secure, scalable PKI solutions aligned with Navy and DoD standards, managing certificate inventories, system configurations, and architectural documentation. The role requires 5+ years in information security focused on PKI and IdAM infrastructure, hands-on experience with PKI hardware/software components, and automated certificate management.…See more Responsibilities include evaluating new technologies, supporting implementation, and partnering across engineering, security, infrastructure, and business teams to deliver solutions meeting operational and technical requirements. A Secret clearance and DoD 8140 Certification are required.