We use essential cookies

Please Accept our Privacy Policy

PKI and Certificate Lifecycle Engineer

SciTec

Boulder, CO 80301 • 10/20/2026

Job Description

Job Description

SciTec, a Firefly Aerospace company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; andaircraftsurvivability missions.

Important Notice:SciTecexclusively works on U.S. government contracts that require U.S. citizenship for all employees.SciTeccannot sponsor or assume sponsorship of employee work visas of any type. Further, U.S. citizenship is a requirement to obtain and keep a security clearance. Applicants that do not meet these requirements will not be considered.

SciTec has immediate opportunities for experienced Staff and Senior Staff Cybersecurity Engineers.

Responsibilities

  • Manage and maintain enterprise PKI for on-prem environment, including root CA, Hardware Security Modules (HSMs), code signing certificates and validation.
  • Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.
  • Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.
  • Design, deploy, and support automated certificate management solutions.
  • Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed.
  • Troubleshoot and resolve certificate-related issues affecting network connections, Openshift configurations, and on-system root CA validation.
  • Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
  • Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
  • Other duties as assigned.

Requirements

  • 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.
  • 2+ years of experience with hands-on management of TLS certificates, PKI management, and
  • Hands-on experience with LDAP management
  • Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
  • Knowledge of Hardware Security Modules (HSMs) and cryptographic key management practices.
  • 2+ years experience with basic system administration of RHEL and Linux
  • Strong troubleshooting, analytical, and technical documentation skills.
  • Active Secret Clearance - TS/SCI strongly preferred
  • Ability to work 100% on-site
  • Detail oriented
  • Good verbal and written communication skills

Candidates who have any of the following skills will be preferred:

  • Experience analyzing and reviewing network connections and architecture
  • Specific experience with Hashicorp Vault, Istio ServiceMesh, RHEL and OpenShift administration
  • Kubernetes on-prem implementations
  • Knowledge of STIGs and NIST 800-53 specifications
  • Bachelor's degree or higher in related field

*Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment.

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Benefits

SciTec offers a highly competitive salary and benefits package, including:

  • 4% Safe Harbor 401(k) match
  • 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
  • 80% company paid Dental insurance
  • 100% company paid Vision insurance
  • 100% company paid Life insurance
  • 100% company paid Long-term Disability insurance
  • Short-term Disability insurance
  • Annual Profit-Sharing Plan
  • Discretionary Performance Bonus
  • Paid Parental Leave
  • Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
  • Flexible work hours

The pay range for this position is $98,000 - $135,000 / year.SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.

SciTec is proud to be an Equal Opportunity employer. VET/Disabled.