Contract Duration: Through December , with potential extension Target Start: November preferred; project kickoff January Work Arrangement: Hybrid (North Mississauga / South Brampton), approximately 2-3 days onsite per week Position Overview Our retail client is looking for an experienced PKI & Machine Identity Engineer to support an enterprise certificate lifecycle management modernization initiative.

The organization currently has an established certificate-management platform and is working toward migrating to a SaaS-based solution while expanding automation capabilities across its environment.

The successful candidate will provide hands-on technical expertise across PKI, certificate lifecycle management, integrations and automation.

They will work closely with security, infrastructure, network and vendor teams to help design, implement, migrate and operationalize the solution.

This is a hands-on implementation role requiring someone who can evaluate technical approaches, recommend best practices and support delivery across multiple enterprise environments.

Required Skills & Experience 5+ years of hands-on experience in PKI, certificate lifecycle management or related security engineering, ideally 8+ years.

Hands-on experience implementing, integrating or enhancing an enterprise certificate lifecycle management platform (e.g., Venafi, Keyfactor, App

ViewX CERT+, Digi

Cert Trust Lifecycle Manager or equivalent).

Robust understanding of PKI, X. certificates, TLS/mTLS, certificate chains, trust models and certificate authorities.

Strong hands-on experience developing certificate lifecycle automation using scripting, APIs and protocols such as ACME, SCEP or EST, including automated issuance, renewal and deployment.

Demonstrated experience automating certificate lifecycle processes, including certificate issuance, renewal and deployment.





Knowledge of enterprise certificate authorities and certificate integrations across Windows/Linux, cloud, applications and network infrastructure.

Experience supporting enterprise technology implementations, migrations, testing and production deployments.

Ability to assess technical designs, troubleshoot complex issues and recommend secure implementation approaches.

Solid communication skills and experience working with cross-functional technical teams and external vendors.

Key Responsibilities Support the enhancement and migration of enterprise certificate lifecycle management capabilities to a SaaS-based platform.

Design, implement and automate certificate lifecycle processes, including discovery, issuance, renewal, deployment, revocation and monitoring.

Develop and support integrations between certificate-management platforms, certificate authorities, applications, servers, network devices and cloud environments.

Work with internal technical teams and external vendors to define implementation approaches, technical requirements and deployment plans.

Assess existing certificate-management processes and identify opportunities to improve automation, security and operational efficiency.

Develop and implement certificate automation using scripting, APIs and industry-standard protocols.

Support solution testing, troubleshooting, migration activities and production deployment.

Evaluate technical options and recommend secure, scalable approaches aligned with industry best practices.

Nice to Have Direct experience with Venafi certificate lifecycle management solutions.

Experience migrating certificate-management platforms to SaaS.

Knowledge of HSMs, cryptographic key management and machine identity security.

Experience with Microsoft certificate services, Microsoft Entra and public certificate authorities.

Experience supporting large-scale PKI or machine identity modernization initiatives.

📌 Senior PKI Engineer - Certificate Lifecycle Management & Automation (Toronto)
🏢 S.i. Systems
📍 Toronto