SciTec has immediate opportunities for experienced Staff and Senior Staff Cybersecurity Engineers.
Responsibilities - Manage and maintain enterprise PKI for on-prem environment, including root CA, Hardware Security Modules (HSMs), code signing certificates and validation.
- Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.
- Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.
- Design, deploy, and support automated certificate management solutions.
- Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed.
- Troubleshoot and resolve certificate-related issues affecting network connections, Openshift configurations, and on-system root CA validation.
- Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
- Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
- Other duties as assigned.
Requirements- 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.
- 2+ years of experience with hands-on management of TLS certificates, PKI management, and
- Hands-on experience with LDAP management
- Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
- Knowledge of Hardware Security Modules (HSMs) and cryptographic key management practices.
- 2+ years experience with basic system administration of RHEL and Linux
- Strong troubleshooting, analytical, and technical documentation skills.
- Active Secret Clearance - TS/SCI strongly preferred
- Ability to work 100% on-site
- Good verbal and written communication skills
Candidates who have any of the following skills will be preferred:
- Experience analyzing and reviewing network connections and architecture
- Specific experience with Hashicorp Vault, Istio ServiceMesh, RHEL and OpenShift administration
- Kubernetes on-prem implementations
- Knowledge of STIGs and NIST 800-53 specifications
- Bachelor's degree or higher in related field
*Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment. Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. BenefitsSciTec offers a highly competitive salary and benefits package, including:
- 4% Safe Harbor 401(k) match
- 100% company paid HSA Medical insurance, with a choice of 2 buy-up options
- 80% company paid Dental insurance
- 100% company paid Vision insurance
- 100% company paid Life insurance
- 100% company paid Long-term Disability insurance
- Short-term Disability insurance
- Annual Profit-Sharing Plan
- Discretionary Performance Bonus
- Paid Parental Leave
- Generous Paid Time Off, including Holiday, Vacation, and Sick Pay
- Flexible work hours
The pay range for this position is $98,000 - $135,000 / year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.
