Job Role: Digital Certificate Management Engineer
Location: Toronto, ON
Work Model: Hybrid
Experience: 6–8 Years
Role Overview
We are looking for an experienced Digital Certificate Management Engineer with strong expertise in Ansible automation, REST API integration, Linux, and digital certificate lifecycle management. The ideal candidate will automate certificate-related workflows, integrate enterprise platforms, and support secure certificate issuance, deployment, renewal, and troubleshooting in a regulated enterprise environment.
Key Responsibilities
- Develop, optimize, and maintain complex Ansible playbooks, roles, and collections to automate workflows across multiple platforms.
- Design, develop, and integrate RESTful APIs to support automation and orchestration using Ansible.
- Manage the end-to-end digital certificate lifecycle, including certificate issuance, deployment, renewal, revocation, and troubleshooting.
- Troubleshoot TLS/mTLS certificate issues, including certificate chains, trust stores, and secure key handling.
- Develop and maintain automation scripts using Python and/or Shell in Linux environments.
- Support Java-based microservices built using the Spring Framework, including certificate integration and secure service-to-service communication.
- Use ServiceNow for change management, approvals, documentation, and change tracking within a regulated enterprise environment.
- Work with DevOps tools such as GitHub, GitHub Actions, Jenkins, and Artifactory to support version control, CI/CD, and artifact management.
- Follow enterprise security standards, operational procedures, and best practices for certificate and key management.
- Collaborate with development, DevOps, infrastructure, and security teams to improve automation and certificate management processes.
Mandatory Skills and Qualifications
- Ansible Automation: Strong hands-on experience developing and maintaining complex playbooks, roles, and collections.
- REST API Integration: Experience designing, building, and integrating RESTful APIs, including API-driven automation through Ansible.
- Digital Certificate Management: Practical experience with certificate lifecycle management, TLS/mTLS, secure key handling, deployment, renewal, and troubleshooting.
- Linux and Scripting: Strong Linux administration skills and scripting experience in Python and/or Shell.
- Java and Spring Framework: Experience with Java-based microservices and the Spring Framework.
- ServiceNow Change Management: Experience managing changes in an enterprise environment, preferably banking or financial services.
- DevOps Toolchain: Working knowledge of GitHub, GitHub Actions, Jenkins, and Artifactory.
Nice-to-Have Skills
- Experience with HashiCorp Vault for secrets and certificate management.
- Knowledge of Terraform and Infrastructure as Code (IaC).
- Experience with PKI concepts, certificate authorities, trust stores, and enterprise certificate management platforms.
- Experience working in highly regulated financial services environments.
Ideal Candidate Profile
The ideal candidate combines strong automation engineering skills with hands-on digital certificate management experience. They should be comfortable integrating APIs, automating certificate workflows, troubleshooting TLS/mTLS issues, and working across application, infrastructure, DevOps, and security teams.
