IT Specialist (Security)

Summary

Incumbent will serve as an IT Specialist with the Authentication Services Branch (AIF-310).

Duties

The incumbent of this position will serve as an Information Technology Specialist in the AIT, Infrastructure & Operations (AIF) Service Division, and will report to the manager of the Authentication Services Branch. He / She will perform multiple duties in support of enterprise Public Key Infrastructure (PKI) administration. Supporting enterprise Public Key Infrastructure (PKI) services, including the design, administration, operation, and maintenance of Certificate Authority (CA), Registration Authority (RA), and Validation Authority (VA) systems. Ensures secure certificate lifecycle management and availability of enterprise identity and trust services supporting organizational mission requirements. Administers and maintains Microsoft Windows Server and Red Hat Enterprise Linux (RHEL) environments supporting PKI, identity management, and application workloads. Performs system configuration, patch management, security hardening, and integration with enterprise authentication and authorization services to maintain compliant and secure operating environments. Implements and enforces operating system security controls across Windows Server and RHEL platforms in accordance with enterprise cybersecurity standards and best practices. Utilizes enterprise monitoring and analytics tools, including Splunk, SolarWinds, and Tanium, to monitor system health, analyze security events, track PKI performance metrics, and respond to operational alerts. Provides operational database support for PKI-related systems using PostgreSQL and MariaDB, performing routine maintenance activities such as executing basic queries, validating backups, conducting availability checks, and supporting system reliability and data integrity. Researches emerging technologies, platform capabilities, and security configurations related to Windows Server and RHEL environments. Evaluates new features and tools, analyzes implementation risks and benefits, and provides technical recommendations supporting secure integration within FAA enterprise infrastructure. Investigates incidents, resolves technical issues, and supports reporting and monitoring functions to improve operational effectiveness and system resilience.

Qualifications

To view the complete qualification standard, applicants should reference- U.S. Office or Personnel Group Coverage Qualification Standard for Information Technology (IT) Management Series 2210 (Alternative A): Information Technology (IT) Management Series 2210 (Alternative A) To qualify for this position, you must demonstrate in your application that you possess at least one year of specialized experience equivalent to FV-H, FG/GS-10-12. Specialized experience is experience that has equipped you with the particular knowledge, skills, and abilities to perform successfully the duties of the position. Specialized Experience is: Experience in Enterprise Public Key Infrastructure (PKI) Administration providing uninterrupted service to customers, and experience administrating Red Hat Enterprise Linux and Windows Servers, PostgreSQL and MariaDB databases, and monitoring systems to support Enterprise PKI infrastructure in a large enterprise environment. Qualifications must be met by the closing date of this vacancy announcement. If the Agency decides to interview any qualified employee on the selection list, then all on the list who are qualified must be interviewed. If the selection list is shortened to a best qualified list through a comparative process, then the best qualified list shall be considered to be the selection list. Selections may be made from this announcement or ACT-AIT-26-AIF310-100580.