Senior PKI Engineer — TLS, HSM & Lifecycle (On-Site)

SciTec; Boulder (CO); Presencial; USD 98.000 - 135.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

4% Safe Harbor 401(k) match

Company-paid health insurance (HSA)

Dental insurance (80%)

Vision insurance (100%)

Life insurance (100%)

Long-term Disability insurance (100%)

Discretionary Performance Bonus

Paid Parental Leave

Generous Paid Time Off

Descripción de la vacante

SciTec, a Firefly Aerospace company, is a dynamic defense contractor delivering advanced PKI and security solutions in support of U.S. national security.

We have immediate opportunities for Staff and Senior Staff Cybersecurity Engineers to work on-site in Colorado, with citizenship and clearance requirements. You will manage enterprise PKI, TLS certificates, HSMs, and cryptographic key management, design automated certificate solutions, and contribute to security assessments and modernization

Formación

• 3–5+ years in PKI engineering, information security, cybersecurity, or infrastructure security.
• 2+ years with TLS certificate management and PKI operations.
• Hands-on LDAP management experience.
• Experience with certificate enrollment, issuance, renewal, revocation.
• Knowledge of HSMs and cryptographic key management.
• 2+ years of basic system administration on RHEL/Linux.
• Strong troubleshooting, analytical, and documentation skills.
• Active Secret Clearance; TS/SCI strongly preferred.
• Ability to work 100% on-site.
• Detail oriented.
• Good verbal and written communication.

Responsabilidades

• Manage and maintain enterprise PKI for on-prem environment, including root CA, HSMs, code signing certificates and validation.
• Oversee certificate lifecycle management: issuance, renewal, revocation, replacement.
• Enforce PKI and secrets security controls, certificate policies, and cryptographic standards.
• Design, deploy, and support automated certificate management solutions.
• Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed.
• Troubleshoot certificate-related issues affecting network connections, OpenShift configurations, and on-system root CA validation.
• Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
• Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
• Other duties as assigned.

Conocimientos

PKI engineering

Information security

Cybersecurity

Infrastructure security

TLS management

RHEL/Linux

Troubleshooting

Documentation

Security clearance

Educación

Bachelor's degree or higher in related field

Herramientas

HashiCorp Vault

Istio ServiceMesh

Kubernetes (on‑prem)

OpenShift

RHEL

LDAP management

Descripción del empleo

SciTec, a Firefly Aerospace company, is a dynamic defense contractor delivering advanced PKI and security solutions in support of U.S. national security.

We have immediate opportunities for Staff and Senior Staff Cybersecurity Engineers to work on-site in Colorado, with citizenship and clearance requirements. You will manage enterprise PKI, TLS certificates, HSMs, and cryptographic key management, design automated certificate solutions, and contribute to security assessments and modernization