Identity Management - Public Key Infrastructure Administrator at CACI

Department: Infrastructure/System Administration

Language

Compensation

$82,700 – $173,900/yr

Setup: On-site
Location: Stuttgart, Baden-Württemberg
Type: Full-time
Level: senior
Posted: Sep 10, 2026

Description

CACI is hiring a full-time Senior Platforms Infrastructure Systems Administrator to lead enterprise Windows infrastructure and certificate lifecycle automation. The role builds and expands certificate automation across servers, applications, and network devices; integrates with Microsoft AD CS and other certificate authorities; develops PowerShell and other automation; and supports Active Directory, DNS/DHCP, Windows Server, STIG compliance, monitoring, and documentation. The position requires a Secret clearance, U.S. citizenship, at least five years of Windows systems administration experience, enterprise PKI and certificate automation experience, and familiarity with HSMs and OCSP/CRL/AIA pathways. The proposed salary range is $82,700 to $173,900 USD.

Required Skills

Active Directory
Group Policy
PKI
PowerShell
Python
STIG compliance
CyberArk
OCSP
CRL
AIA

Additional Information

Required Previous Experiences: At least 5 years of Windows systems administration experience in large-scale, multi-site environments
Experience with enterprise certificate lifecycle automation or enterprise PKI and certificate lifecycle management
Experience integrating certificate automation platforms with enterprise or public certificate authorities
Experience managing Certificate Authority lifecycle infrastructure in the DoD Space or highly regulated federal environments
Hands-on experience configuring and administering nCipher and Thales/Gemalto Luna HSMs
Experience configuring and maintaining OCSP, CRL, and AIA pathways
Experience building, deploying, and managing enterprise certificate templates in a Department of War environment
Relevant industry certification, including CASP+, CompTIA SecurityX, or Security+, with DOD 8570/8140
Preferred Qualifications: Familiarity with Federal/DoD compliance standards, including STIGs, NIST SP 800-53, and FIPS 140-2/3
Strong PowerShell scripting skills for certificate monitoring, CRL updates, or Active Directory management
Experience with Git/GitLab for version-controlled documentation and change workflows
Moderate to strong PowerShell scripting and automation skills, with Python, Bash, or REST API familiarity
Experience producing reference-quality architecture and operational documentation
Familiarity with MECM/SCCM for endpoint management
Familiarity with Linux systems administration
Knowledge of Azure and AWS certificate management services
Experience supporting Combatant Command or Joint Service environments