Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Senior Security Platform Engineer supporting automation and cloud technologies in Canada's insurance sector. Designing and implementing automated certificate lifecycle management solutions along with collaborative cross-functional tasks.

Responsibilities

  • Design, develop, and implement automated certificate lifecycle management solutions
  • Build automation for certificate issuance, renewal, deployment, rotation, and revocation
  • Support enterprise SSL certificate rotation initiatives across production and non-production environments
  • Identify and eliminate manual certificate management processes through automation
  • Support and enhance CyberArk Machine Identity Security (formerly Venafi) capabilities
  • Develop integrations between certificate management platforms and enterprise systems
  • Implement reusable onboarding and automation patterns for application teams
  • Improve certificate visibility, compliance, governance, and operational efficiency
  • Design and implement certificate management integrations with F5, Akamai, AWS Certificate Manager (ACM), Amazon EKS/Kubernetes, Microsoft Graph, and HashiCorp Vault
  • Container platforms and cloud-native workloads
  • Additional enterprise applications and infrastructure services
  • Develop certificate automation solutions leveraging HashiCorp Vault PKI capabilities
  • Build and enhance integrations between HashiCorp Vault and enterprise applications
  • Create automated certificate issuance and rotation workflows
  • Support onboarding of applications to Vault-based certificate management services
  • Partner with application and infrastructure teams to implement certificate automation solutions
  • Provide technical guidance, troubleshooting, onboarding support, and best practices
  • Develop technical documentation, implementation guides, and operational runbooks
  • Lead knowledge-sharing and enablement sessions for stakeholders
  • Develop automation using scripting, APIs, Infrastructure as Code, and DevOps practices
  • Participate in Agile delivery processes, including backlog refinement, estimation, sprint planning, and implementation activities
  • Contribute to platform resiliency, monitoring, operational support, and continuous improvement initiatives

Requirements

  • Bachelor’s degree in computer science
  • 5 years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines
  • Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management
  • Hands-on experience with CyberArk Machine Identity Security (Venafi) or an equivalent certificate management platform
  • Experience implementing certificate automation at enterprise scale
  • Strong knowledge of cryptography principles, certificate trust chains, and machine identity security
  • Hands-on experience with several of the following technologies: HashiCorp Vault, AWS Certificate Manager (ACM), Amazon EKS/Kubernetes, Microsoft Graph, F5 Load Balancers, Akamai, Azure and/or AWS cloud services, and REST APIs and platform integrations
  • Experience with Python, PowerShell, Terraform, Ansible, Git, CI/CD pipelines, Infrastructure as Code, and API-based automation
  • Knowledge of Linux and Windows administration, networking fundamentals, TLS/SSL protocols, load balancers and reverse proxies, Kubernetes and container platforms, and monitoring and logging solutions

Benefits

  • 5-month contract with the potential for permanent employment
  • Full-time position: 37.5 hours per week
  • Schedule: Daytime, 9:00 am to 5:00 pm EST
  • Work Model: Remote with onsite work every Wednesday in Toronto

Job type

Contract

Experience level

Senior

Salary

CA$65 - CA$85 per hour

Degree requirement

Bachelor's Degree

Tech skills

AnsibleAWSAzureCloudKubernetesLinuxPythonTerraformVault

Location requirements

HybridTorontoCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.