About the role
Senior Certificate Automation Engineer (PKI / Venafi / HashiCorp Vault) — Remote
Join a collaborative engineering team responsible for advancing enterprise certificate management capabilities through automation, cloud-native technologies, and machine identity security initiatives. This position offers the opportunity to work on complex security platforms and large-scale infrastructure environments.
What is in it for you:
Salaried: $65-85 per hour. Incorporated Business Rate: $80-100 per hour. 5-month contract with the potential for permanent employment. Full-time position: 37.5 hours per week. Schedule: Daytime, 9:00 am to 5:00 pm EST. Work Model: Remote with onsite work every Wednesday in Toronto.
Responsibilities:
Certificate Lifecycle Automation: Design, develop, and implement automated certificate lifecycle management solutions; build automation for certificate issuance, renewal, deployment, rotation, and revocation; support enterprise SSL certificate rotation initiatives across production and non-production environments; identify and eliminate manual certificate management processes through automation.
Machine Identity Security & Venafi Engineering: Support and enhance CyberArk Machine Identity Security (Venafi) capabilities; develop integrations between certificate management platforms and enterprise systems; implement reusable onboarding and automation patterns for application teams; improve certificate visibility, compliance, governance, and operational efficiency.
Platform Integration Engineering: Design and implement certificate management integrations with F5, Akamai, AWS Certificate Manager (ACM), Amazon EKS/Kubernetes, Microsoft Graph, HashiCorp Vault, container platforms, cloud-native workloads, and additional enterprise applications and infrastructure services.
HashiCorp Vault Automation: Develop certificate automation solutions leveraging HashiCorp Vault PKI capabilities; build and enhance integrations between Vault and enterprise applications; create automated certificate issuance and rotation workflows; support onboarding of applications to Vault-based certificate management services.
Application Onboarding & Support: Partner with application and infrastructure teams to implement certificate automation solutions; provide technical guidance, troubleshooting, onboarding support, and best practices; develop technical documentation, implementation guides, and operational runbooks; lead knowledge-sharing and enablement sessions for stakeholders.
Engineering & Delivery: Develop automation using scripting, APIs, Infrastructure-as-Code, and DevOps practices; participate in Agile delivery processes including backlog refinement, estimation, sprint planning, and implementation activities; contribute to platform resiliency, monitoring, operational support, and continuous improvement initiatives.
What you will need to succeed: Required qualifications Bachelor Science degree in computer science. Experience with TLS/SSL certificate lifecycle workflows. 5+ years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines. Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management. Hands-on experience with CyberArk Machine Identity Security (Venafi) or equivalent certificate management platforms. Experience implementing certificate automation at enterprise scale. Strong knowledge of cryptography principles, certificate trust chains, and machine identity security. Hands-on experience with AWS Certificate Manager (ACM), Amazon EKS / Kubernetes, Microsoft Graph, F5 Load Balancers, Akamai, Azure and/or AWS cloud services, REST APIs, and platform integrations. Experience with Python, PowerShell, Terraform, Ansible, Git, CI/CD pipelines, Infrastructure as Code, and API-based automation. Infrastructure skills including Linux and Windows administration, networking fundamentals, TLS/SSL protocols (including ACME), load balancers and reverse proxies, Kubernetes and container platforms, and monitoring and logging solutions.
Preferred qualifications Experience with HashiCorp Vault PKI Secrets Engine. Experience supporting large-scale certificate management programs. Experience working in Agile delivery environments. Security certifications such as CISSP, CCSP, Security+, GIAC, or equivalent. Experience supporting enterprise security platforms and cloud-native technologies.
Why Recruit Action?
Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach. As part of the screening process, some applications may be reviewed using artificial intelligence tools. Only candidates who meet the hiring criteria will be contacted.
About Recruit Action inc.
Our mission: Recruit Action provides quality recruitment services through support and a personalized approach for both job seekers and businesses.
Doing business with Recruit Action ensures: • Peace of mind • Professional, personalized, and courteous service • Follow-ups according to your needs (daily or weekly) • A partnership • Working with passionate head hunters who have a thorough knowledge of the job market • Service focused on quality
Our success is linked to the success of both our corporate clients and job seekers, whom we consider as partners.
• We offer a specialized service and we understand the needs of our customers.
• We recognize that today's market is complex and requires personalized services.
• We understand the importance for companies to hire a person who shares the organization's values.
• We understand the importance for job seekers to find the job that’s right for them in the long term.
Similar Jobs
About the role
Senior Certificate Automation Engineer (PKI / Venafi / HashiCorp Vault) — Remote
Join a collaborative engineering team responsible for advancing enterprise certificate management capabilities through automation, cloud-native technologies, and machine identity security initiatives. This position offers the opportunity to work on complex security platforms and large-scale infrastructure environments.
What is in it for you:
Salaried: $65-85 per hour. Incorporated Business Rate: $80-100 per hour. 5-month contract with the potential for permanent employment. Full-time position: 37.5 hours per week. Schedule: Daytime, 9:00 am to 5:00 pm EST. Work Model: Remote with onsite work every Wednesday in Toronto.
Responsibilities:
Certificate Lifecycle Automation: Design, develop, and implement automated certificate lifecycle management solutions; build automation for certificate issuance, renewal, deployment, rotation, and revocation; support enterprise SSL certificate rotation initiatives across production and non-production environments; identify and eliminate manual certificate management processes through automation.
Machine Identity Security & Venafi Engineering: Support and enhance CyberArk Machine Identity Security (Venafi) capabilities; develop integrations between certificate management platforms and enterprise systems; implement reusable onboarding and automation patterns for application teams; improve certificate visibility, compliance, governance, and operational efficiency.
Platform Integration Engineering: Design and implement certificate management integrations with F5, Akamai, AWS Certificate Manager (ACM), Amazon EKS/Kubernetes, Microsoft Graph, HashiCorp Vault, container platforms, cloud-native workloads, and additional enterprise applications and infrastructure services.
HashiCorp Vault Automation: Develop certificate automation solutions leveraging HashiCorp Vault PKI capabilities; build and enhance integrations between Vault and enterprise applications; create automated certificate issuance and rotation workflows; support onboarding of applications to Vault-based certificate management services.
Application Onboarding & Support: Partner with application and infrastructure teams to implement certificate automation solutions; provide technical guidance, troubleshooting, onboarding support, and best practices; develop technical documentation, implementation guides, and operational runbooks; lead knowledge-sharing and enablement sessions for stakeholders.
Engineering & Delivery: Develop automation using scripting, APIs, Infrastructure-as-Code, and DevOps practices; participate in Agile delivery processes including backlog refinement, estimation, sprint planning, and implementation activities; contribute to platform resiliency, monitoring, operational support, and continuous improvement initiatives.
What you will need to succeed: Required qualifications Bachelor Science degree in computer science. Experience with TLS/SSL certificate lifecycle workflows. 5+ years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines. Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management. Hands-on experience with CyberArk Machine Identity Security (Venafi) or equivalent certificate management platforms. Experience implementing certificate automation at enterprise scale. Strong knowledge of cryptography principles, certificate trust chains, and machine identity security. Hands-on experience with AWS Certificate Manager (ACM), Amazon EKS / Kubernetes, Microsoft Graph, F5 Load Balancers, Akamai, Azure and/or AWS cloud services, REST APIs, and platform integrations. Experience with Python, PowerShell, Terraform, Ansible, Git, CI/CD pipelines, Infrastructure as Code, and API-based automation. Infrastructure skills including Linux and Windows administration, networking fundamentals, TLS/SSL protocols (including ACME), load balancers and reverse proxies, Kubernetes and container platforms, and monitoring and logging solutions.
Preferred qualifications Experience with HashiCorp Vault PKI Secrets Engine. Experience supporting large-scale certificate management programs. Experience working in Agile delivery environments. Security certifications such as CISSP, CCSP, Security+, GIAC, or equivalent. Experience supporting enterprise security platforms and cloud-native technologies.
Why Recruit Action?
Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach. As part of the screening process, some applications may be reviewed using artificial intelligence tools. Only candidates who meet the hiring criteria will be contacted.
About Recruit Action inc.
Our mission: Recruit Action provides quality recruitment services through support and a personalized approach for both job seekers and businesses.
Doing business with Recruit Action ensures: • Peace of mind • Professional, personalized, and courteous service • Follow-ups according to your needs (daily or weekly) • A partnership • Working with passionate head hunters who have a thorough knowledge of the job market • Service focused on quality
Our success is linked to the success of both our corporate clients and job seekers, whom we consider as partners.
• We offer a specialized service and we understand the needs of our customers.
• We recognize that today's market is complex and requires personalized services.
• We understand the importance for companies to hire a person who shares the organization's values.
• We understand the importance for job seekers to find the job that’s right for them in the long term.