Senior Security Platform Engineer (Contract)
Location: Canada (Remote/Hybrid) – Candidates must be able to work EST business hours. Occasional onsite attendance in Toronto may be required.

Contract: Full time Contract

Position Overview
We are seeking a Senior Security Platform Engineer to support a large-scale enterprise initiative focused on TLS certificate lifecycle management, machine identity security, and security automation. This hands-on engineering role will design and implement automated certificate management solutions, modernize PKI infrastructure, integrate enterprise security platforms, and improve certificate governance across cloud and on-premises environments.

The successful candidate will collaborate with application, infrastructure, cloud, and security teams to build scalable automation that enhances operational efficiency, strengthens security posture, and reduces manual processes.

Key Responsibilities
Certificate Lifecycle Management

Design and implement automated certificate issuance, renewal, deployment, rotation, and revocation processes.

Eliminate manual certificate management through automation.

Machine Identity Security

Configure and enhance enterprise certificate management platforms.

Develop reusable onboarding and automation frameworks for application teams.

Improve certificate visibility, governance, compliance, and operational efficiency.

Platform Integration
Develop integrations with enterprise platforms, including:

HashiCorp Vault

Microsoft Graph

F5 Load Balancers

Akamai

Cloud-native applications and infrastructure services

Develop automation using Python, PowerShell, Terraform, Ansible, REST APIs, and Infrastructure as Code.

Build secure integrations between enterprise platforms and certificate management services.

Participate in Agile ceremonies, sprint planning, and technical delivery.

Improve monitoring, resiliency, and operational support processes.

Application Enablement





Partner with application and infrastructure teams to onboard certificate automation solutions.

Provide technical guidance, troubleshooting, and implementation support.

Create technical documentation, implementation guides, and operational runbooks.

Deliver knowledge transfer sessions and best practices.

Required Qualifications
Technical Experience

5+ years of experience in Security Engineering, Platform Engineering, Infrastructure Engineering, or a related field.

Strong knowledge of PKI, SSL/TLS certificates, certificate lifecycle management, and cryptography.

Experience with enterprise certificate management platforms such as CyberArk Machine Identity Security (Venafi) or similar solutions.

Hands-on experience implementing certificate automation at enterprise scale.

Experience with several of the following

HashiCorp Vault

Microsoft Graph

F5 Load Balancers

Akamai

REST API integrations

Automation & DevOps
Experience with:

Python

PowerShell

Terraform

Ansible

Git

Infrastructure as Code (IaC)

Infrastructure

Linux and Windows administration

TLS/SSL protocols

Load balancers and reverse proxies

Kubernetes and container platforms

Monitoring and logging tools

Preferred Qualifications

Experience with HashiCorp Vault PKI Secrets Engine.

Experience working in Agile delivery environments.

Security certifications such as CISSP, CCSP, Security+, or GIAC.

What Success Looks Like

Accelerate TLS certificate rotation initiatives.

Increase adoption of automated certificate management services.

Reduce manual operational effort through automation.

Strengthen machine identity security, compliance, and governance.

Deliver scalable integrations across cloud and enterprise security platforms.

Note: As part of our recruitment process, artificial intelligence (AI) may be used to assist with activities such as resume screening, candidate matching, and interview scheduling. All hiring decisions are made by human reviewers.

#J-18808-Ljbffr

📌 Senior Security Engineer (Ontario)
🏢 Infotek Consulting
📍 Ontario