Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk

Location: Brampton, ON

Work Model: Hybrid – 2–3 Days WFO

Experience: 6–8 Years

Primary Skill: Cyber Security

Position Summary

Seeking an experienced Enterprise Certificate Lifecycle Management (CLM) Operations Support Engineer with hands-on experience in PKI, SSL/TLS certificate management, Venafi/CyberArk, ADCS, automation, and enterprise certificate operations.

Key Responsibilities

- Manage end-to-end certificate lifecycle: discovery, enrollment, issuance, renewal, revocation, replacement, and retirement.

- Administer and troubleshoot enterprise CLM platforms, connectors, templates, and enrollment policies.

- Support PKI, Microsoft ADCS, Certificate Authorities, certificate chains, SAN, EKU, CRL/OCSP, and Windows Certificate Store.

- Develop automation using PowerShell, Python, or Bash and integrate certificate workflows through REST APIs and ACMEv2.

- Support certificates across Kubernetes cert-manager, Azure Key Vault, AWS ACM, KMS/Secrets Manager, and enterprise applications.

- Monitor certificate expiry,



connector health, API failures, and renewal exceptions.

- Prepare SLA/KPI reports and operational dashboards.

- Support P1–P4 incidents, major incidents, RCA, problem management, and 24x7 on-call rotation when required.

- Maintain SOPs, runbooks, and knowledge documentation.

Essential Skills

- Enterprise Certificate Lifecycle Management (CLM)

- PKI / SSL/TLS / Microsoft ADCS

- Venafi or CyberArk Certificate Manager

- PowerShell scripting

- REST APIs and ACMEv2

- Windows Certificate Store / CAPI

- Certificate troubleshooting and lifecycle operations

Preferred Skills

- Keyfactor, DigiCert Trust Lifecycle Manager, AppViewX

- Kubernetes cert-manager

- Azure Key Vault, AWS ACM/KMS

- OpenSSL, keytool

- Python/Bash

- Splunk, Dynatrace, Prometheus, Grafana

Certifications – Preferred

CyberArk Sentry – Certificate Manager | Venafi Certified Qualified | Microsoft Windows Server/Identity | CKA | ITIL v4

📌 Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk (Brampton)
🏢 Astra North Infoteck
📍 Brampton