631 Booz Allen Hamilton_United States · Quantico, VA

PKI Network Engineer at 631 Booz Allen Hamilton_United States — Quantico, VA

Full-timeQuantico, VA$69,400–$158,000/yearPosted 2026-07-17Apply on Workday

Full job description

PKI Network EngineerThe Opportunity:

Everyone knows security needs to be “baked in” to a system architecture, but you actually know how to bake it in. You can identify and implement ways to harden systems and reduce their attack surface. What if you could use your cyber engineering and architecture skills to design and build secure systems for Marine Corps clients? We’re looking for an engineer who can help create solutions for the Marine Corps that will stand up to even the most advanced cyber threats.

As a PKI Network Engineer on our project, you’ll perform PKI Tier II troubleshooting on Marine Corps systems relating to PKI-specific incidents, including cryptographic logon, certificate validation, and domain controller certificates. You'll provide hardware and software technical support to operate, troubleshoot, and scale three separate forests, classified, unclassified and tactical, with separate infrastructure and services. You'll provide expertise in the development, deployment, and configuration of Certificate Authority (CA) infrastructure and Certificate Validation Infrastructure (CVI). You’ll leverage PKI subject matter expertise in resolving issues within all Marine Corps networks in collaboration with other service providers while providing technical guidance to junior engineers and design support personnel. As a team, we’ll take a critical approach to network design, providing alternatives and customizing solutions to maintain a balance of security and mission needs. Join our team as we improve warfighter communications through cybersecurity.

Join us. The world can’t wait.

You Have:

  • 4+ years of experience with Information Technology (IT) systems administration or network engineering
  • Experience working with MS Windows Server 2019 or later, PowerShell scripting, Virtual Machine Infrastructure (VMWare), storage area network (SAN), CISCO and Juniper network switching, load balancing, Hardware Security Module (HSM), Active Directory, Axway, Online Certificate Status Protocol (OCSP), UNIX, or Linux operating systems and server hardware
  • Ability to travel 15% of the time
  • Secret clearance
  • HS diploma or GED
  • Security+ CE or IAT Level II Certification

Nice If You Have:

  • Experience working with Public Key Infrastructure (PKI), including tactical PKI training
  • Knowledge of Marine Corps Enterprise Network (MCEN) architecture and infrastructure and how PKI is integrated from the end-user to service delivery points
  • Knowledge of BMC Remedy
  • Top Secret clearance
  • CASP or CISSP Certification
  • MCSA Certification in Windows Server 2008 or later

Clearance:

Compensation

Identity Statement

Candidate AI Usage Policy

  • Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
  • Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
  • Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

#LI-AH1