Senior Security Platform Engineer

Recruit Action inc.

. Design, develop, and implement automated certificate lifecycle management solutions.

Posted 9/21/2026contractToronto • CanadaSenior💰 CA$65 - CA$85 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing automated certificate lifecycle management solutions, with a strong focus on PKI, SSL/TLS certificate workflows, and enterprise-scale automation. Proficient in integrating various platforms and enhancing security through automation and best practices.

Highest-signal resume keywords

Certificate Lifecycle ManagementPKI and SSL/TLS ExpertiseCyberArk Machine Identity SecurityAWS Certificate ManagerAutomation with Python and Terraform

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Certificate AutomationPKI ImplementationTLS/SSL ProtocolsScripting with PythonInfrastructure as CodeAPI-based AutomationLinux and Windows AdministrationNetworking FundamentalsCI/CD PipelinesKubernetes

Soft Skills

Technical GuidanceCollaborationKnowledge SharingTroubleshootingBest Practices Development

Tools & Technologies

CyberArkVenafiF5 Load BalancersAkamaiAmazon EKSMicrosoft GraphHashiCorp VaultAnsibleGitAzure

Certifications & Qualifications

CISSPCCSPSecurity+GIAC

Industry Keywords

Certificate ManagementMachine Identity SecurityCloud-native TechnologiesAgile DeliveryOperational Efficiency

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudKubernetesLinuxPythonTerraformVault

About the role

Key responsibilities & impact

Design, develop, and implement automated certificate lifecycle management solutions.
Build automation for certificate issuance, renewal, deployment, rotation, and revocation.
Support enterprise SSL certificate rotation initiatives across production and non-production environments.
Identify and eliminate manual certificate management processes through automation.
Support and enhance CyberArk Machine Identity Security (Venafi) capabilities.
Develop integrations between certificate management platforms and enterprise systems.
Implement reusable onboarding and automation patterns for application teams.
Improve certificate visibility, compliance, governance, and operational efficiency.
Design and implement integrations with F5, Akamai, AWS Certificate Manager, Amazon EKS/Kubernetes, Microsoft Graph, HashiCorp Vault, container platforms, cloud-native workloads, and enterprise applications and infrastructure services.
Develop certificate automation solutions using HashiCorp Vault PKI capabilities.
Partner with application and infrastructure teams on certificate automation solutions.
Provide technical guidance, troubleshooting, onboarding support, and best practices.
Develop technical documentation, implementation guides, and operational runbooks.
Lead knowledge-sharing and enablement sessions.
Develop automation using scripting, APIs, Infrastructure-as-Code, and DevOps practices.
Participate in Agile delivery processes, including backlog refinement, estimation, sprint planning, and implementation.
Contribute to platform resiliency, monitoring, operational support, and continuous improvement initiatives.

Requirements

What you’ll need

Bachelor Science degree in computer science.
5+ years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines.
Experience with TLS/SSL certificate lifecycle workflows.
Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management.
Hands-on experience with CyberArk Machine Identity Security (Venafi) or equivalent certificate management platforms.
Experience implementing certificate automation at enterprise scale.
Strong knowledge of cryptography principles, certificate trust chains, and machine identity security.
Hands-on experience with AWS Certificate Manager (ACM), Amazon EKS / Kubernetes, Microsoft Graph, F5 Load Balancers, Akamai, Azure and/or AWS cloud services, REST APIs, and platform integrations.
Experience with Python, PowerShell, Terraform, Ansible, Git, CI/CD pipelines, Infrastructure as Code, and API-based automation.
Infrastructure skills including Linux and Windows administration, networking fundamentals, TLS/SSL protocols (including ACME), load balancers and reverse proxies, Kubernetes and container platforms, and monitoring and logging solutions.
Preferred: Experience with HashiCorp Vault PKI Secrets Engine.
Preferred: Experience supporting large-scale certificate management programs.
Preferred: Experience working in Agile delivery environments.
Preferred: Security certifications such as CISSP, CCSP, Security+, GIAC, or equivalent.
Preferred: Experience supporting enterprise security platforms and cloud-native technologies.

Benefits

Comp & perks

5-month contract with the potential for permanent employment
Full-time position: 37.5 hours per week
Remote work model with onsite work every Wednesday in Toronto
Daytime schedule, 9:00 am to 5:00 pm EST