Senior Security Platform Engineer (Contract)

Location: Canada (Remote/Hybrid) – Candidates must be able to work EST business hours. Occasional onsite attendance in Toronto may be required.

Contract: Full time Contract Position Overview

We are seeking a Senior Security Platform Engineer to support a large-scale enterprise initiative focused on TLS certificate lifecycle management, machine identity security, and security automation. This hands-on engineering role will design and implement automated certificate management solutions, modernize PKI infrastructure, integrate enterprise security platforms, and improve certificate governance across cloud and on-premises environments.

The successful candidate will collaborate with application, infrastructure, cloud, and security teams to build scalable automation that enhances operational efficiency, strengthens security posture, and reduces manual processes. Key Responsibilities

Certificate Lifecycle Management

Design and implement automated certificate issuance, renewal, deployment, rotation, and revocation processes.

Support enterprise-wide TLS/SSL certificate rotation initiatives.

Eliminate manual certificate management through automation.

Machine Identity Security

Configure and enhance enterprise certificate management platforms.

Develop reusable onboarding and automation frameworks for application teams.

Improve certificate visibility, governance, compliance, and operational efficiency.

Platform Integration

Develop integrations with enterprise platforms, including:

HashiCorp Vault

AWS Certificate Manager (ACM)

Kubernetes (EKS)

Microsoft Graph





F5 Load Balancers

Akamai

Cloud-native applications and infrastructure services

Automation & Engineering

Develop automation using Python, PowerShell, Terraform, Ansible, REST APIs, and Infrastructure as Code.

Build secure integrations between enterprise platforms and certificate management services.

Participate in Agile ceremonies, sprint planning, and technical delivery.

Improve monitoring, resiliency, and operational support processes.

Application Enablement

Partner with application and infrastructure teams to onboard certificate automation solutions.

Provide technical guidance, troubleshooting, and implementation support.

Create technical documentation, implementation guides, and operational runbooks.

Deliver knowledge transfer sessions and best practices.

Required Qualifications

Technical Experience

5+ years of experience in Security Engineering, Platform Engineering, Infrastructure Engineering, or a related field.

Strong knowledge of PKI, SSL/TLS certificates, certificate lifecycle management, and cryptography.

Experience with enterprise certificate management platforms such as CyberArk Machine Identity Security (Venafi) or similar solutions.





Hands-on experience implementing certificate automation at enterprise scale.

Cloud & Platform Technologies

Experience with several of the following:

HashiCorp Vault

AWS Certificate Manager (ACM)

Kubernetes (EKS)

Microsoft Graph

F5 Load Balancers

Akamai

AWS and/or Azure

REST API integrations

Automation & DevOps

Experience with

Python

PowerShell

Terraform

Ansible

Git

CI/CD pipelines

Infrastructure as Code (IaC)

API-driven automation

Infrastructure

Linux and Windows administration

Networking fundamentals

TLS/SSL protocols

Load balancers and reverse proxies

Kubernetes and container platforms

Monitoring and logging tools

Preferred Qualifications

Experience with HashiCorp Vault PKI Secrets Engine.

Experience supporting large-scale certificate management programs.

Experience working in Agile delivery environments.

Security certifications such as CISSP, CCSP, Security+, or GIAC.

What Success Looks Like

Deliver enterprise-scale certificate lifecycle automation.

Accelerate TLS certificate rotation initiatives.

Increase adoption of automated certificate management services.

Reduce manual operational effort through automation.

Strengthen machine identity security, compliance, and governance.

Deliver scalable integrations across cloud and enterprise security platforms.

Note: As part of our recruitment process, artificial intelligence (AI) may be used to assist with activities such as resume screening, candidate matching, and interview scheduling. All hiring decisions are made by human reviewers.

📌 Senior Security Engineer (Toronto)
🏢 Infotek Consulting
📍 Toronto