PKI and Certificate Lifecycle Engineer

SciTec; Boulder (CO); On-site; USD 98,000 - 135,000; Full time

Benefits offered by this job

4% Safe Harbor 401(k) match

Company-paid health insurance (HSA)

Dental insurance (80%)

Vision insurance (100%)

Life insurance (100%)

Long-term Disability insurance (100%)

Discretionary Performance Bonus

Paid Parental Leave

Generous Paid Time Off

Job summary

SciTec, a Firefly Aerospace company, is a dynamic defense contractor delivering advanced PKI and security solutions in support of U.S. national security.

We have immediate opportunities for Staff and Senior Staff Cybersecurity Engineers to work on-site in Colorado, with citizenship and clearance requirements. You will manage enterprise PKI, TLS certificates, HSMs, and cryptographic key management, design automated certificate solutions, and contribute to security assessments and modernization

Qualifications

• 3–5+ years in PKI engineering, information security, cybersecurity, or infrastructure security.
• 2+ years with TLS certificate management and PKI operations.
• Hands-on LDAP management experience.
• Experience with certificate enrollment, issuance, renewal, revocation.
• Knowledge of HSMs and cryptographic key management.
• 2+ years of basic system administration on RHEL/Linux.
• Strong troubleshooting, analytical, and documentation skills.
• Active Secret Clearance; TS/SCI strongly preferred.
• Ability to work 100% on-site.
• Detail oriented.
• Good verbal and written communication.

Responsibilities

• Manage and maintain enterprise PKI for on-prem environment, including root CA, HSMs, code signing certificates and validation.
• Oversee certificate lifecycle management: issuance, renewal, revocation, replacement.
• Enforce PKI and secrets security controls, certificate policies, and cryptographic standards.
• Design, deploy, and support automated certificate management solutions.
• Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed.
• Troubleshoot certificate-related issues affecting network connections, OpenShift configurations, and on-system root CA validation.
• Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
• Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
• Other duties as assigned.

Skills

PKI engineering

Information security

Cybersecurity

Infrastructure security

TLS management

RHEL/Linux

Troubleshooting

Documentation

Security clearance

Education

Bachelor's degree or higher in related field

Tools

HashiCorp Vault

Istio ServiceMesh

Kubernetes (on‑prem)

OpenShift

RHEL

LDAP management

Job description

SciTec, a Firefly Aerospace company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; andaircraftsurvivability missions.

Important Notice

SciTecexclusively works on U.S. government contracts that require U.S. citizenship for all employees.SciTeccannot sponsor or assume sponsorship of employee work visas of any type. Further, U.S. citizenship is a requirement to obtain and keep a security clearance. Applicants that do not meet these requirements will not be considered.

SciTec has immediate opportunities for experienced Staff and Senior Staff Cybersecurity Engineers.

Responsibilities

• Manage and maintain enterprise PKI for on-prem environment, including root CA, Hardware Security Modules (HSMs), code signing certificates and validation.
• Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.
• Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.
• Design, deploy, and support automated certificate management solutions.
• Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as‑needed.
• Troubleshoot and resolve certificate‑related issues affecting network connections, Openshift configurations, and on‑system root CA validation.
• Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
• Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
• Other duties as assigned.

• 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.

• 2+ years of experience with hands‑on management of TLS certificates, PKI management, and
• Hands‑on experience with LDAP management
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of Hardware Security Modules (HSMs) and cryptographic key management practices.
• 2+ years experience with basic system administration of RHEL and Linux
• Strong troubleshooting, analytical, and technical documentation skills.
• Active Secret Clearance - TS/SCI strongly preferred

• Ability to work 100% on‑site

• Detail oriented

• Good verbal and written communication skills

Candidates who have any of the following skills will be preferred:

• Experience analyzing and reviewing network connections and architecture
• Specific experience with Hashicorp Vault, Istio ServiceMesh, RHEL and OpenShift administration
• Kubernetes on‑prem implementations
• Knowledge of STIGs and NIST 800-53 specifications
• Bachelor's degree or higher in related field

*Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment.

Colorado Residents: In any materials you submit, you may redact or remove age‑identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

SciTec offers a highly competitive salary and benefits package, including:

• 4% Safe Harbor 401(k) match
• 100% company paid HSA Medical insurance, with a choice of 2 buy‑up options
• 80% company paid Dental insurance
• 100% company paid Vision insurance
• 100% company paid Life insurance
• 100% company paid Long‑term Disability insurance
• Short‑term Disability insurance
• Annual Profit‑Sharing Plan
• Discretionary Performance Bonus
• Paid Parental Leave
• Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
• Flexible work hours

The pay range for this position is $98,000 - $135,000 / year.SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.

SciTec is proud to be an Equal Opportunity employer. VET/Disabled.