Enterprise CLM Operations Support Engineer – PKI, Venafi​/CyberArk

Location: Brampton, ON

Work Model: Hybrid – 2–3 Days WFO

Experience: 6–8 Years

Primary Skill: Cyber Security

Seeking an experienced Enterprise Certificate Lifecycle Management (CLM) Operations Support Engineer with hands-on experience in PKI, SSL/TLS certificate management, Venafi/Cyber Ark, ADCS, automation, and enterprise certificate operations
.

• Manage end-to-end certificate lifecycle: discovery, enrollment, issuance, renewal, revocation, replacement, and retirement.
• Administer and troubleshoot enterprise CLM platforms, connectors, templates, and enrollment policies.
• Support PKI, Microsoft ADCS, Certificate Authorities, certificate chains, SAN, EKU, CRL/OCSP
  , and Windows Certificate Store.
• Develop automation using Power Shell, Python, or Bash and integrate certificate workflows through REST APIs and ACMEv
  2.
• Support certificates across Kubernetes cert-manager, Azure Key Vault, AWS ACM, KMS/Secrets Manager
  , and enterprise applications.
• Monitor certificate expiry, connector health, API failures, and renewal exceptions.
• Prepare SLA/KPI reports and operational dashboards.
• Support P1–P4 incidents, major incidents, RCA, problem management, and 24x7 on-call rotation when required.
• Maintain SOPs, runbooks, and knowledge documentation.

• Enterprise Certificate Lifecycle Management (CLM)
• PKI / SSL/TLS / Microsoft ADCS
• Venafi or Cyber Ark Certificate Manager
• Power Shell scripting
• REST APIs and ACMEv2
• Windows Certificate Store / CAPI
• Certificate troubleshooting and lifecycle operations

• Keyfactor, Digi Cert Trust Lifecycle Manager, AppViewX
• Kubernetes cert-manager
• Azure Key Vault, AWS ACM/KMS
• OpenSSL, keytool
• Python/Bash
• Splunk, Dynatrace, Prometheus, Grafana

Cyber Ark Sentry – Certificate Manager | Venafi Certified Professional | Microsoft Windows Server/Identity | CKA | ITIL v4