Position: PKI & Certificate Automation Engineer
Job type: Full-time/Permanent hiring
Location: Hybrid/Onsite- Toronto, ON
We are seeking a highly skilled Senior PKI & Certificate Automation Engineer with strong expertise in Digital Certificate Lifecycle Management, PKI Infrastructure, TLS/mTLS Security, Ansible Automation, and API Integration. The ideal candidate will lead the design and implementation of automated certificate issuance, renewal, deployment, and compliance workflows across large-scale enterprise environments.
This role requires deep hands-on experience with Ansible automation, REST API integrations, Linux administration, Python scripting, ServiceNow workflow automation, and certificate management ecosystems to support secure application delivery and infrastructure modernization initiatives.
Key Responsibilities
- Design, develop, and maintain enterprise-scale certificate lifecycle automation solutions.
- Automate certificate provisioning, renewal, deployment, revocation, and compliance monitoring using Ansible.
- Integrate PKI platforms, Certificate Authorities (CA), and certificate management tools using REST APIs.
- Troubleshoot and resolve TLS, SSL, mTLS, certificate chain, truststore, and keystore-related issues.
- Develop reusable Ansible playbooks, roles, collections, and workflow orchestration solutions.
- Build API-driven integrations for security, infrastructure, and application platforms.
- Collaborate with DevOps, Security, Infrastructure, and Application teams to ensure secure service delivery.
- Automate ServiceNow change management and governance workflows.
- Support CI/CD pipelines utilizing GitHub, GitHub Actions, Jenkins, and Artifactory.
- Work closely with Java Spring Boot application teams to support secure certificate integration requirements.
Required Technical Skills
PKI & Certificate Management
- 5+ years of hands-on experience with:
- Public Key Infrastructure (PKI)
- Digital Certificate Management
- Certificate Lifecycle Automation
- TLS/SSL and mTLS
- Certificate Issuance & Renewal
- Key Management
- X.509 Certificates
- Keystores & Truststores
- Certificate Troubleshooting
Ansible Automation
- 5+ years of experience developing and supporting:
- Ansible Playbooks
- Roles and Collections
- Workflow Automation
- Infrastructure as Code (IaC)
- Enterprise Automation Platforms
API Integration
- 5+ years of experience with:
- RESTful APIs
- API Automation
- API Security
- Cross-Platform Integrations
- JSON/XML Processing
Linux & Scripting
- Strong Linux Administration experience.
- Python and Shell/Bash scripting expertise.
- Automation framework development experience.
Enterprise Tooling
- ServiceNow
- GitHub
- GitHub Actions
- Jenkins
- JFrog Artifactory
Application & Platform Knowledge
- Java
- Spring Framework
- Spring Boot Microservices
- Secure Application Delivery
Nice to Have
- HashiCorp Vault
- Terraform
- Secrets Management
- Cloud Infrastructure Automation
- DevSecOps Practices
- Financial Services Industry Experience
