PKI and Certificate Lifecycle Engineer
About The Position
SciTec is hiring an experienced PKI and Certificate Lifecycle Engineer to support its cybersecurity and infrastructure security work for U.S. government contracts. The position manages enterprise PKI in an on-premises environment and oversees digital certificate and cryptographic key lifecycles. The role also designs and supports automated certificate management, troubleshoots certificate issues, maintains technical and governance documentation, and contributes to security and modernization efforts. The position requires U.S. citizenship, an active Secret clearance, and the ability to work 100% on-site. TS/SCI clearance is strongly preferred.
Requirements
- 3–5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.
- 2+ years of hands-on experience with TLS certificates and PKI management.
- Hands-on experience with LDAP management.
- Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
- Knowledge of HSMs and cryptographic key management practices.
- 2+ years of experience with basic RHEL and Linux system administration.
- Strong troubleshooting, analytical, and technical documentation skills.
- Active Secret clearance; TS/SCI is strongly preferred.
- Ability to work 100% on-site.
- Detail-oriented, with good verbal and written communication skills.
- U.S. citizenship is required; SciTec cannot sponsor or assume sponsorship of employee work visas.
- AI-generated resumes, cover letters, and applications will not be considered.
Nice To Haves
- Experience analyzing and reviewing network connections and architecture.
- Experience with HashiCorp Vault, Istio Service Mesh, RHEL, and OpenShift administration.
- Experience with on-premises Kubernetes implementations.
- Knowledge of STIGs and NIST 800-53 specifications.
- Bachelor's degree or higher in a related field.
Responsibilities
- Manage and maintain enterprise PKI for an on-premises environment, including root CA, Hardware Security Modules (HSMs), code-signing certificates, and validation.
- Oversee issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.
- Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.
- Design, deploy, and support automated certificate management solutions.
- Manage cryptographic key generation, storage, rotation, escrow, and retirement as needed.
- Troubleshoot and resolve certificate-related issues affecting network connections, OpenShift configurations, and on-system root CA validation.
- Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
- Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
- Perform other duties as assigned.
Benefits
- 4% Safe Harbor 401(k) match.
- 100% company-paid HSA medical insurance, with a choice of two buy-up options.
- 80% company-paid dental insurance.
- 100% company-paid vision insurance.
- 100% company-paid life insurance.
- 100% company-paid long-term disability insurance.
- Short-term disability insurance.
- Annual profit-sharing plan.
- Discretionary performance bonus.
- Paid parental leave.
- Generous paid time off, including holiday, vacation, and sick pay.
- Flexible work hours.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
