Senior Security Engineer

Senior Security Platform Engineer (Contract)

Location: Canada (Remote/Hybrid) – Candidates must be able to work EST business hours. Occasional onsite attendance in Toronto may be required.

Contract: Full-Time Contract

We are seeking a Senior Security Platform Engineer to support a large-scale enterprise initiative focused on TLS certificate lifecycle management, machine identity security, and security automation. This hands-on engineering role will design and implement automated certificate management solutions, modernize PKI infrastructure, integrate enterprise security platforms, and improve certificate governance across cloud and on-premises environments.

The successful candidate will collaborate with application, infrastructure, cloud, and security teams to build scalable automation that enhances operational efficiency, strengthens security posture, and reduces manual processes.

• Design and implement automated certificate issuance, renewal, deployment, rotation, and revocation processes.
• Eliminate manual certificate management through automation.

• Configure and enhance enterprise certificate management platforms.
• Develop reusable onboarding and automation frameworks for application teams.
• Improve certificate visibility, governance, compliance, and operational efficiency.

Develop integrations with enterprise platforms, including:

• Hashi Corp Vault
• Microsoft Graph
• F5 Load Balancers
• Akamai
• Cloud-native applications and infrastructure services
• Develop automation using Python, Power Shell, Terraform, Ansible, REST APIs, and Infrastructure as Code.
• Build secure integrations between enterprise platforms and certificate management services.
• Participate in Agile ceremonies, sprint planning, and technical delivery.
• Improve monitoring, resiliency, and operational support processes.

• Partner with application and infrastructure teams to onboard certificate automation solutions.
• Provide technical guidance, troubleshooting, and implementation support.
• Create technical documentation, implementation guides, and operational runbooks.
• Deliver knowledge transfer sessions and best practices.

• 5+ years of experience in Security Engineering, Platform Engineering, Infrastructure Engineering, or a related field.
• Strong knowledge of PKI, SSL/TLS certificates, certificate lifecycle management, and cryptography.
• Experience with enterprise certificate management platforms such as Cyber Ark Machine Identity Security (Venafi) or similar solutions.
• Hands-on experience implementing certificate automation at enterprise scale.

• Hashi Corp Vault
• Microsoft Graph
• F5 Load Balancers
• Akamai
• REST API integrations

Experience with:

• Python
• Power Shell
• Terraform
• Ansible
• Git
• Infrastructure as Code (IaC)

• Linux and Windows administration
• TLS/SSL protocols
• Load balancers and reverse proxies
• Kubernetes and container platforms
• Monitoring and logging tools

• Experience with Hashi Corp Vault PKI Secrets Engine.
• Experience working in Agile delivery environments.
• Security certifications such as CISSP, CCSP, Security+, or GIAC.

• Accelerate TLS certificate rotation initiatives.
• Increase adoption of automated certificate management services.
• Reduce manual operational effort through automation.
• Strengthen machine identity security, compliance, and governance.
• Deliver scalable integrations across cloud and enterprise security platforms.

Note: As part of our recruitment process, artificial intelligence (AI) may be used to assist with activities such as resume screening, candidate matching, and interview scheduling. All hiring decisions are made by human reviewers.