Senior Security Engineer

Senior Security Platform Engineer (Contract)

Location: Canada (Remote/Hybrid) – Candidates must be able to work EST business hours. Occasional onsite attendance in Toronto may be required.

Contract: Full-Time Contract

Position Overview

We are seeking a Senior Security Platform Engineer to support a large-scale enterprise initiative focused on TLS certificate lifecycle management, machine identity security, and security automation. This hands-on engineering role will design and implement automated certificate management solutions, modernize PKI infrastructure, integrate enterprise security platforms, and improve certificate governance across cloud and on-premises environments.

The successful candidate will collaborate with application, infrastructure, cloud, and security teams to build scalable automation that enhances operational efficiency, strengthens security posture, and reduces manual processes.

Key Responsibilities

Certificate Lifecycle Management

• Design and implement automated certificate issuance, renewal, deployment, rotation, and revocation processes.
• Eliminate manual certificate management through automation.

Machine Identity Security

• Configure and enhance enterprise certificate management platforms.
• Develop reusable onboarding and automation frameworks for application teams.
• Improve certificate visibility, governance, compliance, and operational efficiency.

Platform Integration

Develop integrations with enterprise platforms, including:

• HashiCorp Vault
• Microsoft Graph
• F5 Load Balancers
• Akamai
• Cloud-native applications and infrastructure services
• Develop automation using Python, PowerShell, Terraform, Ansible, REST APIs, and Infrastructure as Code.
• Build secure integrations between enterprise platforms and certificate management services.
• Participate in Agile ceremonies, sprint planning, and technical delivery.
• Improve monitoring, resiliency, and operational support processes.

Application Enablement

• Partner with application and infrastructure teams to onboard certificate automation solutions.
• Provide technical guidance, troubleshooting, and implementation support.
• Create technical documentation, implementation guides, and operational runbooks.
• Deliver knowledge transfer sessions and best practices.

Required Qualifications

Technical Experience

• 5+ years of experience in Security Engineering, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong knowledge of PKI, SSL/TLS certificates, certificate lifecycle management, and cryptography.
• Experience with enterprise certificate management platforms such as CyberArk Machine Identity Security (Venafi) or similar solutions.
• Hands-on experience implementing certificate automation at enterprise scale.

Experience with several of the following

• HashiCorp Vault
• Microsoft Graph
• F5 Load Balancers
• Akamai
• REST API integrations

Automation & DevOps

Experience with:

• Python
• PowerShell
• Terraform
• Ansible
• Git
• Infrastructure as Code (IaC)

Infrastructure

• Linux and Windows administration
• TLS/SSL protocols
• Load balancers and reverse proxies
• Kubernetes and container platforms
• Monitoring and logging tools

Preferred Qualifications

• Experience with HashiCorp Vault PKI Secrets Engine.
• Experience working in Agile delivery environments.
• Security certifications such as CISSP, CCSP, Security+, or GIAC.

What Success Looks Like

• Accelerate TLS certificate rotation initiatives.
• Increase adoption of automated certificate management services.
• Reduce manual operational effort through automation.
• Strengthen machine identity security, compliance, and governance.
• Deliver scalable integrations across cloud and enterprise security platforms.

Note: As part of our recruitment process, artificial intelligence (AI) may be used to assist with activities such as resume screening, candidate matching, and interview scheduling. All hiring decisions are made by human reviewers.

#J-18808-Ljbffr