Hello,

We are currently hiring a "Senior Security Consultant" for one of our client based out in Canada. Please let me know if you are interested.

Title: Senior Security Consultant – PKI & Certificate Lifecycle (Entrust CSP)

Location: Toronto, ON/Remote Role

Contract: 06+ Months

Role Summary

We are seeking a Senior Security Consultant – PKI & Certificate Lifecycle Management with 10–15 years of cybersecurity and infrastructure security experience and deep hands-on expertise in enterprise PKI architecture, deployment, and operations. The consultant will support a government healthcare entity in Alberta, delivering secure, scalable, and compliant on-premises Public Key Infrastructure (PKI) and certificate lifecycle management solutions using Entrust Certificate Services Platform (CSP). This role requires strong expertise in cryptography, identity trust services, certificate lifecycle governance, and security architecture, along with experience operating in regulated healthcare/public-sector environments.

The consultant will lead design, implementation, migration, automation, and operationalization of enterprise PKI aligned with security frameworks and compliance obligations.

Responsibilities:

PKI Architecture & Design

- Design and implement enterprise on-prem PKI architecture including Offline Root CA and Issuing CA hierarchy.
- Integrate Hardware Security Modules (HSM) for key protection and signing operations.
- Architect and deploy Entrust Certificate Services Platform (CSP).
- Develop PKI trust models supporting healthcare applications and identity systems.

Certificate Lifecycle Management (CLM)

- Implement automated certificate enrollment, renewal, revocation, and discovery workflows using Entrust CSP.
- Integrate CLM processes with Active Directory, network devices, and application platforms.
- Establish certificate governance frameworks including inventory tracking and expiration monitoring.

Cryptography & Security Engineering





- Implement robust cryptographic standards (RSA, ECC, TLS 1.2/1.3).
- Perform key lifecycle management aligned to NIST standards.
- Support certificate usage for TLS, code signing, email encryption, and device authentication.

Healthcare & Government Compliance

- Align PKI controls with Government of Alberta security policies and Canadian healthcare regulations.
- Support audit readiness and compliance reporting related to cryptographic key management.

Migration & Modernization Initiatives

- Lead PKI modernization or migration initiatives including migration to Entrust CSP.
- Conduct risk assessments and trust gap analysis across applications and infrastructure.

Security Operations & Documentation

- Develop PKI operational procedures, disaster recovery plans, and incident response playbooks.
- Produce architecture diagrams, certificate lifecycle workflows, and governance documentation.

Required Qualifications

- 10–15 years of IT/cybersecurity experience with 5+ years dedicated to enterprise PKI.
- Hands-on experience designing and implementing on-prem PKI.
- Strong experience with Entrust Certificate Services Platform (CSP).
- Expertise in cryptographic standards, PKI trust models, and certificate-based authentication.
- Experience integrating PKI with Active Directory, network/security appliances, and application platforms.

Preferred Qualifications

- Experience with Entrust nShield HSM or equivalent.
- Familiarity with Client ADCS and hybrid PKI architectures.
- Experience implementing certificate automation for DevOps/Kubernetes environments.
- Knowledge of post-quantum cryptography readiness strategies.

Certifications (Preferred)

PKI/Product Certifications:

- Entrust PKI / Certificate Services Platform Certification

- Certified Encryption Specialist (ECES)

Cybersecurity Certifications (Preferred):

- CISSP

- CCSP

- CISM or CISA

Infrastructure/Security Certifications (Preferred):

- CCNP Security / CCIE Security

- CompTIA Security+ / CySA+

Thankyou

Shivam Sengar

📌 Senior Security Consultant (Canada)
🏢 Artech
📍 Canada