Enterprise CLM Operations Support Engineer PKI, Venafi/CyberArk Location: Brampton, ON Work Model: Hybrid 23 Days WFO Experience: 68 Years Primary Skill: Cyber Security Position Summary Seeking an experienced Enterprise Certificate Lifecycle Management (CLM) Operations Support Engineer with hands-on experience in PKI, SSL/TLS certificate management, Venafi/CyberArk, ADCS, automation, and enterprise certificate operations.

Key Responsibilities Manage end-to-end certificate lifecycle: discovery, enrollment, issuance, renewal, revocation, replacement, and retirement.

Administer and troubleshoot enterprise CLM platforms, connectors, templates, and enrollment policies.

Support PKI, Microsoft ADCS, Certificate Authorities, certificate chains, SAN, EKU, CRL/OCSP, and Windows Certificate Store.

Develop automation using PowerShell, Python, or Bash and integrate certificate workflows through REST APIs and ACMEv2.

Support certificates across Kubernetes cert-manager, Azure Key Vault, AWS ACM, KMS/Secrets Manager, and enterprise applications.

Monitor certificate expiry, connector health,



API failures, and renewal exceptions.

Prepare SLA/KPI reports and operational dashboards.

Support P1P4 incidents, major incidents, RCA, problem management, and 24x7 on-call rotation when required.

Maintain SOPs, runbooks, and knowledge documentation.

Essential Skills Enterprise Certificate Lifecycle Management (CLM) PKI / SSL/TLS / Microsoft ADCS Venafi or CyberArk Certificate Manager PowerShell scripting REST APIs and ACMEv2 Windows Certificate Store / CAPI Certificate troubleshooting and lifecycle operations Preferred Skills Keyfactor, DigiCert Trust Lifecycle Manager, AppViewX Kubernetes cert-manager Azure Key Vault, AWS ACM/KMS OpenSSL, keytool Python/Bash Splunk, Dynatrace, Prometheus, Grafana Certifications Preferred CyberArk Sentry Certificate Manager | Venafi Certified Skilled | Microsoft Windows Server/Identity | CKA | ITIL v4

5+ years

Required Skill Profession

Other General

📌 Enterprise Clm Operations Support Engineer – Pki, Venafi/cyberark Brampton
🏢 Astra North Infoteck
📍 Brampton