Senior PKI & Certificate Lifecycle Engineer

SciTec Incorporated; Boulder (CO); Presencial; USD 98.000 - 135.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

4% Safe Harbor 401(k) match

Paid health and vision insurance

Paid time off and holidays

Discretionary performance bonus

Descripción de la vacante

SciTec Incorporated is actively seeking experienced Staff and Senior Staff Cybersecurity Engineers for on-site roles in Colorado. The position focuses on building and maintaining enterprise PKI, TLS management, and cryptographic controls to support DOD-grade security requirements.

Candidates should have 3–5+ years in PKI or cybersecurity, hands-on TLS management, LDAP experience, and knowledge of HSMs. An active clearance is highly preferred and on-site work is required.

Formación

• 3-5+ years of PKI engineering, information security, cybersecurity, or infrastructure security.
• 2+ years of hands-on TLS certificate management and PKI.
• Hands-on LDAP management experience.
• Experience with certificate lifecycle (issuance, renewal, revocation, validation).
• Knowledge of HSMs and cryptographic key management.

Responsabilidades

• Manage enterprise PKI for on-prem environment (root CA, HSMs, code signing certs).
• Oversee certificate lifecycle for users, devices, apps, servers, and cloud services.
• Enforce PKI policies, practices and cryptographic standards.
• Design and deploy automated certificate management solutions.
• Handle cryptographic key generation, storage, rotation, and retirement.

Conocimientos

PKI engineering

Information security

Cybersecurity

TLS management

Linux admin

Educación

Bachelor's degree or higher

Herramientas

OpenShift

Hashicorp Vault

Istio ServiceMesh

Kubernetes

LDAP management

Descripción del empleo

SciTec Incorporated is actively seeking experienced Staff and Senior Staff Cybersecurity Engineers for on-site roles in Colorado. The position focuses on building and maintaining enterprise PKI, TLS management, and cryptographic controls to support DOD-grade security requirements.

Candidates should have 3–5+ years in PKI or cybersecurity, hands-on TLS management, LDAP experience, and knowledge of HSMs. An active clearance is highly preferred and on-site work is required.