Senior Certificate Automation Engineer

Senior Certificate Automation Engineer

• Location:
  Toronto, ON – (Remote/Hybrid) – Onsite Wednesdays & Open to fully remote.
• Pay Rate: $79.56/hr - $93.91/hr
• Contract End Date:
  December 31, 2026
  - Option to extend based on project requirements, funding, and performance.

We at Raise are hiring a Senior Certificate Automation Engineer for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand.

• Design, develop, and implement automated certificate lifecycle management solutions.
• Build automation for certificate issuance, renewal, deployment, rotation, and revocation.
• Support enterprise SSL certificate rotation initiatives across production and non-production environments.
• Identify and eliminate manual certificate management processes through automation.

• Support and enhance Cyber Ark Machine Identity Security (Venafi) capabilities.
• Develop integrations between certificate management platforms and enterprise systems.
• Implement reusable onboarding and automation patterns for application teams.
• Improve certificate visibility, compliance, governance, and operational efficiency.

Design and implement certificate management integrations with enterprise platforms, including:

• F5
• Akamai
• AWS Certificate Manager (ACM)
• Amazon EKS / Kubernetes
• Microsoft Graph
• Hashi Corp Vault
• Container platforms and cloud-native workloads
• Additional enterprise applications and infrastructure services

• Develop certificate automation solutions leveraging Hashi Corp Vault PKI capabilities.
• Build and enhance integrations between Vault and enterprise applications.
• Create automated certificate issuance and rotation workflows.
• Support onboarding of applications to Vault-based certificate management services.

• Partner with application and infrastructure teams to implement certificate automation solutions.
• Provide technical guidance, troubleshooting, onboarding support, and best practices.
• Develop technical documentation, implementation guides, and operational runbooks.
• Lead knowledge-sharing and enablement sessions for stakeholders.

• Develop automation using scripting, APIs, Infrastructure-as-Code, and Dev Ops practices.
• Participate in Agile delivery processes including backlog refinement, estimation, sprint planning, and implementation activities.
• Contribute to platform resiliency, monitoring, operational support, and continuous improvement initiatives.

• 5+ years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines.
• Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management.
• Venafi/Cyber Ark Machine Identity Security. Hands-on experience with Cyber Ark Machine Identity Security (Venafi) or equivalent certificate management platforms.
• Experience implementing certificate automation at enterprise scale.
• Strong knowledge of cryptography principles, certificate trust chains, and machine identity security.
• Platform & Cloud
  
  Experience:
  
  Hands-on experience with several of the following:
  • AWS Certificate Manager (ACM)
  • Amazon EKS / Kubernetes
  • Microsoft Graph
  • F5 Load Balancers
  • Akamai
  • Azure and/or AWS cloud services
  • REST APIs and platform integrations
• Automation & Dev Ops:
  
  Experience with :
  • Python
  • Power Shell
  • Terraform
  • Ansible
  • Git
  • CI/CD pipelines
  • Infrastructure as Code
  • API-based automation
• Infrastructure Skills
  • Linux and Windows administration
  • Networking fundamentals
  • TLS/SSL protocols, including ACME
  • Load balancers and reverse proxies
  • Kubernetes and container platforms
  • Monitoring and logging solutions

• Experience with Hashi Corp Vault PKI Secrets Engine.
• Experience supporting large-scale certificate management programs.
• Experience working in Agile delivery environments.
• Security certifications such as CISSP, CCSP, Security+, GIAC, or equivalent.
• Experience supporting enterprise security platforms and cloud-native technologies.

• Bachelor Science degree in computer science. TLS/SSL certificate lifecycle workflows

• Cyber Ark Machine Identity Security (formerly Venafi) / Certificate Management- managing certificate life cycles and integrations with platforms such as Hashi Corp Vault, Akamai, and other enterprise systems. Understanding of certificate workflows and automation processes.
• Scripting and Automation-…