Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.
Job Title: Enterprise Technology Systems
Location(s): Merrifield, VA
Summary:
- This contractor will support the deployment, documentation, and operationalization of a cryptographic key inventory management solution. This solution aligns with client Standard and is designed to improve PCI DSS/NCUA compliance, reduce operational risk, and enable lifecycle tracking of cryptographic key artifacts. The contractor will assist in requirements validation, ServiceNow configuration, inventory mapping, audit readiness, and knowledge transfer to operational support teams.
Key Responsibilities:
- Document current manual tracking processes for cryptographic keys and related PCI artifacts
- Define and implement workflows to log and track key access, updates, and status changes
- Support the configuration of ServiceNow inventory management and mobile barcode scanning workflows
- Create a PCI-centric audit log and support automated alerting for lifecycle events (e.g., certificate/key expiration)
- Map key ownership and custodianship structures
- Support categorization of keys by risk/sensitivity
- Contribute to the creation of a key lifecycle management plan
- Collaborate with cybersecurity, PKI, and infrastructure stakeholders
- Develop documentation, SOPs, and training materials to support transition to operational support
Required Skills:
- Hands-on experience with ServiceNow asset/inventory management modules
- Familiarity with cryptographic key lifecycle management (generation, assignment, expiration, and tracking)
- Strong understanding of compliance frameworks (PCI DSS, NCUA, NIST, internal standards)
- Experience working in secure environments enforcing role-based access, separation of duties, and auditability
- Ability to build process maps, documentation, and training materials
- Comfortable gathering requirements from cross-functional teams and translating them into technical workflows
Preferred Qualifications:
- Familiarity with Hardware Security Modules (HSMs) and cryptographic custody environments
- Experience with PKI key tracking and coordination with PKI lifecycle owners (e.g., Venafi)
- Knowledge of certificate renewal workflows and alerting mechanisms
- Exposure to key ownership and M-of-N access models
- Strong collaboration experience with audit and compliance teams
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.
.
|