{"id":2886933,"url":"https://alion.io/job/scitec-pki-and-certificate-lifecycle-engineer","title":"PKI and Certificate Lifecycle Engineer","company":{"id":686565,"name":"SciTec","domain":"scitec.com","url":"https://alion.io/company/scitec","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":89,"open_postings":16,"ghost_share":0,"stale_share":0.625,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Boulder, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":98000,"max":135000,"currency":"USD","period":"year","gross":null,"usd_annual":135000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HashiCorp Vault","optional":false},{"name":"Istio","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"NIST 800-53","optional":false},{"name":"OpenShift","optional":false},{"name":"PKI","optional":false}],"status":"live","first_seen_at":"2026-10-19T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-21T20:49:44Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"SciTec, a Firefly Aerospace company, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, & reconnaissance; space domain awareness; and aircraft survivability missions.\nImportant Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. SciTec cannot sponsor or assume sponsorship of employee work visas of any type. Further, U.S. citizenship is a requirement to obtain and keep a security clearance. Applicants that do not meet these requirements will not be considered.\nSciTec has immediate opportunities for experienced Staff and Senior Staff Cybersecurity Engineers.\nResponsibilities\nManage and maintain enterprise PKI for on-prem environment, including root CA, Hardware Security Modules (HSMs), code signing certificates and validation.\nOversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.\nImplement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.\nDesign, deploy, and support automated certificate management solutions.\nManage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed.\nTroubleshoot and resolve certificate-related issues affecting network connections, Openshift configurations, and on-system root CA validation.\nDevelop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.\nParticipate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.\nOther duties as assigned. \nRequirements\n3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.\n2+ years of experience with hands-on management of TLS certificates, PKI management, and \nHands-on experience with LDAP management\nExperience with certificate enrollment, issuance, renewal, revocation, and validation processes.\nKnowledge of Hardware Security Modules (HSMs) and cryptographic key management practices.\n2+ years experience with basic system administration of RHEL and Linux\nStrong troubleshooting, analytical, and technical documentation skills.\nActive Secret Clearance - TS/SCI strongly preferred\nAbility to work 100% on-site \nDetail oriented \nGood verbal and written communication skills \nCandidates who have any of the following skills will be preferred:\nExperience analyzing and reviewing network connections and architecture\nSpecific experience with Hashicorp Vault, Istio ServiceMesh, RHEL and OpenShift administration\nKubernetes on-prem implementations\nKnowledge of STIGs and NIST 800-53 specifications\nBachelor's degree or higher in related field\n*Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment.\nColorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.\nBenefits\nSciTec offers a highly competitive salary and benefits package, including:\n4% Safe Harbor 401(k) match\n100% company paid HSA Medical insurance, with a choice of 2 buy-up options\n80% company paid Dental insurance\n100% company paid Vision insurance\n100% company paid Life insurance\n100% company paid Long-term Disability insurance\nShort-term Disability insurance\nAnnual Profit-Sharing Plan\nDiscretionary Performance Bonus\nPaid Parental Leave\nGenerous Paid Time Off, including Holiday, Vacation, and Sick Pay\nFlexible work hours\nThe pay range for this position is $98,000 - $135,000 / year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.\nSciTec is proud to be an Equal Opportunity employer. VET/Disabled.","description_format":"text","description_chars":4465,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Dental insurance","Flexible schedule","Health insurance","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-20T00:37:11Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":20,"reasons":["conf:3","stale_co","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":135000,"is_top_pay":true},"html_url":"https://alion.io/job/scitec-pki-and-certificate-lifecycle-engineer","json_url":"https://alion.io/job/scitec-pki-and-certificate-lifecycle-engineer.json","meta":{"generated_at":"2026-10-22T03:48:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3799,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686565},"rest":"https://alion.io/mcp/rest/get_company?id=686565"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fscitec-pki-and-certificate-lifecycle-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fscitec-pki-and-certificate-lifecycle-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fscitec-pki-and-certificate-lifecycle-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/scitec-pki-and-certificate-lifecycle-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fscitec-pki-and-certificate-lifecycle-engineer"}]}