Senior PKI & Certificate Lifecycle Engineer

SciTec Incorporated; Boulder (CO); On-site; USD 98,000 - 135,000; Full time

Benefits offered by this job

4% Safe Harbor 401(k) match

Paid health and vision insurance

Paid time off and holidays

Discretionary performance bonus

Job summary

SciTec Incorporated is actively seeking experienced Staff and Senior Staff Cybersecurity Engineers for on-site roles in Colorado. The position focuses on building and maintaining enterprise PKI, TLS management, and cryptographic controls to support DOD-grade security requirements.

Candidates should have 3–5+ years in PKI or cybersecurity, hands-on TLS management, LDAP experience, and knowledge of HSMs. An active clearance is highly preferred and on-site work is required.

Qualifications

• 3-5+ years of PKI engineering, information security, cybersecurity, or infrastructure security.
• 2+ years of hands-on TLS certificate management and PKI.
• Hands-on LDAP management experience.
• Experience with certificate lifecycle (issuance, renewal, revocation, validation).
• Knowledge of HSMs and cryptographic key management.

Responsibilities

• Manage enterprise PKI for on-prem environment (root CA, HSMs, code signing certs).
• Oversee certificate lifecycle for users, devices, apps, servers, and cloud services.
• Enforce PKI policies, practices and cryptographic standards.
• Design and deploy automated certificate management solutions.
• Handle cryptographic key generation, storage, rotation, and retirement.

Skills

PKI engineering

Information security

Cybersecurity

TLS management

Linux admin

Education

Bachelor's degree or higher

Tools

OpenShift

Hashicorp Vault

Istio ServiceMesh

Kubernetes

LDAP management

Job description

SciTec Incorporated is actively seeking experienced Staff and Senior Staff Cybersecurity Engineers for on-site roles in Colorado. The position focuses on building and maintaining enterprise PKI, TLS management, and cryptographic controls to support DOD-grade security requirements.

Candidates should have 3–5+ years in PKI or cybersecurity, hands-on TLS management, LDAP experience, and knowledge of HSMs. An active clearance is highly preferred and on-site work is required.