Enterprise Technology Systems Consultant

Vienna, VA or Pensacola, FL – 4 days onsite, 1 day remote

Pay Rate: Open to Both C2C and W2 options

Position Type: Multiyear Contract

Summary:

This contractor will support the deployment, documentation, and operationalization of a cryptographic key inventory management solution. This solution aligns with Navy Federal’s Standard and is designed to improve PCI DSS/NCUA compliance, reduce operational risk, and enable lifecycle tracking of cryptographic key artifacts. The contractor will assist in requirements validation, ServiceNow configuration, inventory mapping, audit readiness, and knowledge transfer to operational support teams.

Key Responsibilities:

• Document current manual tracking processes for cryptographic keys and related PCI artifacts
• Define and implement workflows to log and track key access, updates, and status changes
• Support the configuration of ServiceNow inventory management and mobile barcode scanning workflows
• Create a PCI-centric audit log and support automated alerting for lifecycle events (e.g., certificate/key expiration)
• Map key ownership and custodianship structures
• Support categorization of keys by risk/sensitivity
• Contribute to the creation of a key lifecycle management plan
• Collaborate with cybersecurity, PKI, and infrastructure stakeholders
• Develop documentation, SOPs, and training materials to support transition to operational support

Required Skills:

• Hands-on experience with ServiceNow asset/inventory management modules
• Familiarity with cryptographic key lifecycle management (generation, assignment, expiration, and tracking)
• Strong understanding of compliance frameworks (PCI DSS, NCUA, NIST, internal standards)
• Experience working in secure environments enforcing role-based access, separation of duties, and auditability
• Ability to build process maps, documentation, and training materials
• Comfortable gathering requirements from cross-functional teams and translating them into technical workflows

Preferred Qualifications:

• Familiarity with Hardware Security Modules (HSMs) and cryptographic custody environments
• Experience with PKI key tracking and coordination with PKI lifecycle owners (e.g., Venafi)
• Knowledge of certificate renewal workflows and alerting mechanisms
• Exposure to key ownership and M-of-N access models
• Strong collaboration experience with audit and compliance teams

.