About the Role
Support innovative enterprise security initiatives in Canada's insurance sector by contributing to automation, cloud technologies, and modern security platforms. Work in a collaborative environment with flexible remote work and opportunities to make a meaningful impact.
Responsibilities
- Design, develop, and implement automated certificate lifecycle management solutions.
- Build automation for certificate issuance, renewal, deployment, rotation, and revocation.
- Support enterprise SSL certificate rotation initiatives across production and non-production environments.
- Identify and eliminate manual certificate management processes through automation.
- Support and enhance CyberArk Machine Identity Security (formerly Venafi) capabilities.
- Develop integrations between certificate management platforms and enterprise systems.
- Implement reusable onboarding and automation patterns for application teams.
- Improve certificate visibility, compliance, governance, and operational efficiency.
- Design and implement certificate management integrations with F5, Akamai, AWS Certificate Manager (ACM), Amazon EKS/Kubernetes, Microsoft Graph, and HashiCorp Vault.
- Support container platforms and cloud-native workloads.
- Support additional enterprise applications and infrastructure services.
- Develop certificate automation solutions leveraging HashiCorp Vault PKI capabilities.
- Build and enhance integrations between HashiCorp Vault and enterprise applications.
- Create automated certificate issuance and rotation workflows.
- Support onboarding of applications to Vault-based certificate management services.
- Partner with application and infrastructure teams to implement certificate automation solutions.
- Provide technical guidance, troubleshooting, onboarding support, and best practices.
- Develop technical documentation, implementation guides, and operational runbooks.
- Lead knowledge-sharing and enablement sessions for stakeholders.
- Develop automation using scripting, APIs, Infrastructure as Code, and DevOps practices.
- Participate in Agile delivery processes, including backlog refinement, estimation, sprint planning, and implementation activities.
- Contribute to platform resiliency, monitoring, operational support, and continuous improvement initiatives.
Requirements
- Bachelor’s degree in computer science.
- 5 years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines.
- Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management.
- Hands-on experience with CyberArk Machine Identity Security (Venafi) or an equivalent certificate management platform.
- Experience implementing certificate automation at enterprise scale.
- Strong knowledge of cryptography principles, certificate trust chains, and machine identity security.
- Hands-on experience with several of the following technologies: HashiCorp Vault, AWS Certificate Manager (ACM), Amazon EKS/Kubernetes, Microsoft Graph, F5 Load Balancers, Akamai, Azure and/or AWS cloud services, and REST APIs and platform integrations.
- Experience with Python, PowerShell, Terraform, Ansible, Git, CI/CD pipelines, Infrastructure as Code, and API-based automation.
- Knowledge of Linux and Windows administration, networking fundamentals, TLS/SSL protocols, load balancers and reverse proxies, Kubernetes and container platforms, and monitoring and logging solutions.
- Experience with HashiCorp Vault PKI Secrets Engine.
- Experience supporting large-scale certificate management programs.
- Experience working in Agile delivery environments.
- Security certifications such as CISSP, CCSP, Security+, GIAC, or equivalent.
- Experience supporting enterprise security platforms and cloud-native technologies.
Skills
- PKI
- SSL/TLS certificates
- Certificate lifecycle management
- CyberArk Machine Identity Security (Venafi)
- Cryptography
- Certificate trust chains
- Machine identity security
- HashiCorp Vault
- AWS Certificate Manager (ACM)
- Amazon EKS/Kubernetes
- Microsoft Graph
- F5 Load Balancers
- Akamai
- Azure cloud services
- AWS cloud services
- REST APIs
- Platform integrations
- Python
- PowerShell
- Terraform
- Ansible
- Git
- CI/CD pipelines
- Infrastructure as Code
- API-based automation
- Linux administration
- Windows administration
- Networking fundamentals
- TLS/SSL protocols
- Load balancers
- Reverse proxies
- Kubernetes
- Container platforms
- Monitoring solutions
- Logging solutions
- HashiCorp Vault PKI Secrets Engine
Location
- Remote
- Toronto
Work Type
- Remote
- Onsite
- Full-time
- Contract
Experience Level
- Senior
- 5 years of experience
Education Level
- Bachelor’s degree in computer science
Salary/Compensations
- $65-85 per hour
- $80-100 per hour
Benefits
- 5-month contract with the potential for permanent employment.
About the Company
- Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach.
- As part of the screening process, some applications may be reviewed using artificial intelligence tools.
- Only candidates who meet the hiring criteria will be contacted.
