PKI Auditor- Active Secret Clearance

The PKI Auditor will conduct technical and compliance audits of DoD PKI implementations, ensuring alignment with DoDI 8520.02, CNSS, DISA, and JFHQ-DODIN requirements. They will evaluate issuance practices, certificate management procedures, and registration authority operations, review and assess documentation, audit logs, and system configurations, validate compliance with NIST 800-53 controls, CNSSI 1300 series, CNSSI 4005/4006, and applicable DoD cybersecurity frameworks, collect artifacts and evidence, collaborate with ISSOs, COMSEC personnel, and network defenders, and provide remediation recommendations and risk mitigation strategies. The auditor will also assist in preparing reports for JFHQ-DODIN, DoD CIO, and Component Cybersecurity Service Providers (CSSPs).