> Markdown version of [/jobs/ext/4232696-pki-and-certificate-lifecycle-engineer](https://www.wearedevelopers.com/jobs/ext/4232696-pki-and-certificate-lifecycle-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# PKI and Certificate Lifecycle Engineer

- **Company:** SciTec, Inc.
- **Location:** Boulder, CO, United States
- **Experience:** Expert
- **Salary:** $98,000 - $135,000
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Linux, Hardware Security Module, Key Management, Lightweight Directory Access Protocols (LDAP), Network Architecture, Network Connections, OpenShift, Public Key Infrastructure, Red Hat Enterprise Linux, Cloud Services, Software Vulnerability Management, Istio, Software Troubleshooting, SC Clearance, Kubernetes, Hashicorp, Network Server
- **Published:** October 18, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=cf5c964ca5731abe

## About the Role

* 3-5+ years of experience in PKI engineering, information security, cybersecurity, or infrastructure security.

 * 2+ years of experience with hands-on management of TLS certificates, PKI management, and
 * Hands-on experience with LDAP management
 * Experience with certificate enrollment, issuance, renewal, revocation, and validation processes.
 * Knowledge of Hardware Security Modules (HSMs) and cryptographic key management practices.
 * 2+ years experience with basic system administration of RHEL and Linux
 * Strong troubleshooting, analytical, and technical documentation skills.
 * Active Secret Clearance - TS/SCI strongly preferred
 * Ability to work 100% on-site
 * Detail oriented
 * Good verbal and written communication skills

Candidates who have any of the following skills will be preferred:

 * Experience analyzing and reviewing network connections and architecture
 * Specific experience with Hashicorp Vault, Istio ServiceMesh, RHEL and OpenShift administration
 * Kubernetes on-prem implementations
 * Knowledge of STIGs and NIST 800-53 specifications
 * Bachelor's degree or higher in related field

 * Resumes, Cover Letters, and Applications which are generated by AI will not be considered for employment.

## Description

* Manage and maintain enterprise PKI for on-prem environment, including root CA, Hardware Security Modules (HSMs), code signing certificates and validation.
 * Oversee certificate lifecycle management, including issuance, renewal, revocation, and replacement of digital certificates for users, devices, applications, servers, cloud services, and network infrastructure.
 * Implement and enforce PKI and secrets security controls, certificate policies, certificate practice statements, and cryptographic standards.
 * Design, deploy, and support automated certificate management solutions.
 * Manage cryptographic key generation, storage, rotation, escrow, and retirement processes as-needed.
 * Troubleshoot and resolve certificate-related issues affecting network connections, Openshift configurations, and on-system root CA validation.
 * Develop and maintain PKI architecture documentation, operational procedures, governance standards, and technical diagrams.
 * Participate in security assessments, incident investigations, vulnerability remediation efforts, and infrastructure modernization initiatives.
 * Other duties as assigned.