Duration:
6 month contract

Must Have:

- 5+ years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines.
- Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management.
- Hands-on experience with CyberArk Machine Identity Security (Venafi) or equivalent certificate management platforms.
- Experience implementing certificate automation at enterprise scale.
- Robust knowledge of cryptography principles, certificate trust chains, and machine identity security.
- Platform & Cloud Experience: Hands-on experience with several of the following:
- HashiCorp Vault
- AWS Certificate Manager (ACM)
- Amazon EKS / Kubernetes
- Microsoft Graph
- F5 Load Balancers
- Akamai
- Azure and/or AWS cloud services
- REST APIs and platform integrations

Our client…
A complex life insurance organization.





Responsibilities:

- Support and enhance CyberArk Machine Identity Security (Venafi) capabilities.
- Develop integrations between certificate management platforms and enterprise systems.
- Implement reusable onboarding and automation patterns for application teams.
- Improve certificate visibility, compliance, governance, and operational efficiency.
- Design and implement certificate management integrations with enterprise platforms including:
- F5
- Akamai
- AWS Certificate Manager (ACM)
- Amazon EKS / Kubernetes
- Microsoft Graph
- HashiCorp Vault
- Container platforms and cloud-native workloads
- Additional enterprise applications and infrastructure services

📌 CyberArk Machine Identity Security Platform engineer (Waterloo)
🏢 isgSearch
📍 Waterloo