PKI and Certificate Lifecycle Engineer

About this role

SciTec, a Firefly Aerospace company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.

Important Notice : SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. SciTec cannot sponsor or assume sponsorship of employee work visas of any type. Further, U.S. citizenship is a requirement to obtain and keep a security clearance. Applicants that do not meet these requirements will not be considered. SciTec has immediate opportunities for experienced Staff and Senior Staff Cybersecurity Engineers.

Responsibilities Manage and maintain enterprise PKI for on-prem environment, including root CA, Hardware Security Modules (HSMs), code signing certificates and validation. Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure. Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.

Design, deploy, and support automated certificate management solutions. Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed. Troubleshoot and resolve certificate-related issues affecting network connections, Openshift configurations, and on-system root CA validation. Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.

Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives. Other duties as assigned. Requirements 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security. 2+ years of experience with hands-on management of TLS certificates, PKI management, and Hands-on experience with LDAP management Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.