PKI and Certificate Lifecycle Engineer
About The Position
SciTec, a Firefly Aerospace company, is a defense contractor delivering advanced technologies for U.S. national security and defense. The PKI and Certificate Lifecycle Engineer will manage enterprise public key infrastructure and certificate lifecycle operations, support cryptographic key management, and maintain security controls and documentation. The role supports on-premises systems and may involve troubleshooting certificates affecting network connections, OpenShift configurations, and root CA validation. This position requires U.S. citizenship because SciTec works exclusively on U.S. government contracts requiring citizenship and security clearance eligibility. The role is 100% on-site. An active Secret clearance is required; TS/SCI is strongly preferred. AI-generated resumes, cover letters, and applications will not be considered.
Requirements
- 3–5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.
- 2+ years of hands-on experience managing TLS certificates and PKI.
- Hands-on experience with LDAP management.
- Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
- Knowledge of HSMs and cryptographic key management practices.
- 2+ years of experience with basic RHEL and Linux system administration.
- Strong troubleshooting, analytical, and technical documentation skills.
- Active Secret clearance; U.S. citizenship is required.
- Ability to work 100% on-site.
- Good verbal and written communication skills.
- Attention to detail.
Nice To Haves
- TS/SCI clearance.
- Experience analyzing and reviewing network connections and architecture.
- Specific experience with HashiCorp Vault, Istio Service Mesh, RHEL and OpenShift administration.
- Experience with on-premises Kubernetes implementations.
- Knowledge of STIGs and NIST 800-53 specifications.
- Bachelor’s degree or higher in a related field.
Responsibilities
- Manage and maintain enterprise PKI for the on-premises environment, including root CAs, HSMs, and code-signing certificates and validation.
- Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement for users, devices, applications, servers, cloud services, and network infrastructure.
- Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.
- Design, deploy, and support automated certificate management solutions.
- Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as needed.
- Troubleshoot and resolve certificate-related issues affecting network connections, OpenShift configurations, and on-system root CA validation.
- Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
- Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
- Perform other duties as assigned.
Benefits
- 4% Safe Harbor 401(k) match.
- 100% company-paid HSA.
- Medical insurance, with a choice of two buy-up options.
- 80% company-paid dental insurance.
- 100% company-paid vision insurance.
- 100% company-paid life insurance.
- 100% company-paid long-term disability insurance.
- Short-term disability insurance.
- Annual profit-sharing plan.
- Discretionary performance bonus.
- Paid parental leave.
- Generous paid time off, including holiday, vacation, and sick pay.
- Flexible work hours.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
