PKI and Certificate Lifecycle Engineer

SciTec, a Firefly Aerospace company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions. 

• →Manage and maintain enterprise PKI for on-prem environment, including root CA, Hardware Security Modules (HSMs), code signing certificates and validation.
• →Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.
• →Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.
• →Design, deploy, and support automated certificate management solutions.
• →Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed.
• →Troubleshoot and resolve certificate-related issues affecting network connections, Openshift configurations, and on-system root CA validation.
• →Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
• →Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
• →Other duties as assigned. 

• 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.

• 2+ years of experience with hands-on management of TLS certificates, PKI management, and 
• Hands-on experience with LDAP management
• Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
• Knowledge of Hardware Security Modules (HSMs) and cryptographic key management practices.
• 2+ years experience with basic system administration of RHEL and Linux
• Strong troubleshooting, analytical, and technical documentation skills.
• Active Secret Clearance - TS/SCI strongly preferred

• Ability to work 100% on-site 

• Detail oriented 

• Good verbal and written communication skills 

Candidates who have any of the following skills will be preferred: 

• Experience analyzing and reviewing network connections and architecture
• Specific experience with Hashicorp Vault, Istio ServiceMesh, RHEL and OpenShift administration
• Kubernetes on-prem implementations
• Knowledge of STIGs and NIST 800-53 specifications
• Bachelor's degree or higher in related field