Title: Senior Security Consultant – PKI & Certificate Lifecycle (Entrust CSP) Location: Toronto, ON/Remote Duration: 6 Months Introduction We are seeking an experienced professional with deep hands-on expertise in enterprise Public Key Infrastructure (PKI) architecture, deployment, and operations.
The consultant will support a government healthcare entity, delivering secure, scalable, and compliant on-premises PKI and certificate lifecycle management solutions using Entrust Certificate Services Platform (CSP).
Required Skills & Qualifications 10–15 years of IT/cybersecurity experience with 5 years dedicated to enterprise PKI.
Hands-on experience designing and implementing on-prem PKI.
Robust experience with Entrust Certificate Services Platform (CSP).
Expertise in cryptographic standards, PKI trust models, and certificate-based authentication.
Experience integrating PKI with Active Directory, network/security appliances, and application platforms.
Prior work experience in the healthcare or public-sector industry.
Preferred Skills & Qualifications Experience with Entrust nShield HSM or equivalent.
Familiarity with Client ADCS and hybrid PKI architectures.
Experience implementing certificate automation for Dev
Ops/Kubernetes environments.
Knowledge of post-quantum cryptography readiness strategies.
Day-to-Day Responsibilities Design and implement enterprise on-prem PKI architecture including Offline Root CA and Issuing CA hierarchy.
Integrate Hardware Security Modules (HSM) for key protection and signing operations.
Implement automated certificate enrollment, renewal, revocation, and discovery workflows using Entrust CSP.
Align PKI controls with Government of Alberta security policies and Canadian healthcare regulations.