PKI & Certificate Automation Engineer
- ON, Canada
- Ontario, Canada, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Position: PKI & Certificate Automation Engineer
Job type: Full-time/Permanent hiring
Location: Hybrid/Onsite- Toronto, ON
We are seeking a highly skilled Senior PKI & Certificate Automation Engineer with strong expertise in Digital Certificate Lifecycle Management, PKI Infrastructure, TLS/mTLS Security, Ansible Automation, and API Integration. The ideal candidate will lead the design and implementation of automated certificate issuance, renewal, deployment, and compliance workflows across large-scale enterprise environments.
This role requires deep hands-on experience with Ansible automation, REST API integrations, Linux administration, Python scripting, ServiceNow workflow automation, and certificate management ecosystems to support secure application delivery and infrastructure modernization initiatives.
Key Responsibilities
- Design, develop, and maintain enterprise-scale certificate lifecycle automation solutions.
- Automate certificate provisioning, renewal, deployment, revocation, and compliance monitoring using Ansible.
- Integrate PKI platforms, Certificate Authorities (CA), and certificate management tools using REST APIs.
- Troubleshoot and resolve TLS, SSL, mTLS, certificate chain, truststore, and keystore-related issues.
- Develop reusable Ansible playbooks, roles, collections, and workflow orchestration solutions.
- Build API-driven integrations for security, infrastructure, and application platforms.
- Collaborate with DevOps, Security, Infrastructure, and Application teams to ensure secure service delivery.
- Automate ServiceNow change management and governance workflows.
- Support CI/CD pipelines utilizing GitHub, GitHub Actions, Jenkins, and Artifactory.
- Work closely with Java Spring Boot application teams to support secure certificate integration requirements.
Required Technical Skills
PKI & Certificate Management
- 5+ years of hands-on experience with:
- Public Key Infrastructure (PKI)
- Digital Certificate Management
- Certificate Lifecycle Automation
- TLS/SSL and mTLS
- Certificate Issuance & Renewal
- Key Management
- X.509 Certificates
- Keystores & Truststores
- Certificate Troubleshooting
Ansible Automation
- 5+ years of experience developing and supporting:
- Ansible Playbooks
- Roles and Collections
- Workflow Automation
- Infrastructure as Code (IaC)
- Enterprise Automation Platforms
API Integration
- 5+ years of experience with:
- RESTful APIs
- API Automation
- API Security
- Cross-Platform Integrations
- JSON/XML Processing
Linux & Scripting
- Strong Linux Administration experience.
- Python and Shell/Bash scripting expertise.
- Automation framework development experience.
Enterprise Tooling
- ServiceNow
- GitHub
- GitHub Actions
- Jenkins
- JFrog Artifactory
Application & Platform Knowledge
- Java
- Spring Framework
- Spring Boot Microservices
- Secure Application Delivery
Nice to Have
- HashiCorp Vault
- Terraform
- Secrets Management
- Cloud Infrastructure Automation
- DevSecOps Practices
- Financial Services Industry Experience
More about this job
Responsibilities
Design and maintain enterprise certificate lifecycle automation for certificate provisioning, renewal, deployment, revocation, and compliance, using Ansible and REST API integrations. Troubleshoot certificate and TLS issues, automate ServiceNow governance workflows, support CI/CD and Java Spring Boot teams, and collaborate with security, infrastructure, DevOps, and application teams.
Requirements
Requires 5+ years of hands-on experience in PKI and certificate management, Ansible automation, and REST API integration, along with strong Linux administration and Python and Shell/Bash scripting skills. Candidates should also have experience with enterprise automation, certificate troubleshooting, ServiceNow, CI/CD tools, and secure application delivery; HashiCorp Vault, Terraform, DevSecOps, cloud automation, and financial services experience are advantageous.
Skills
- Public Key Infrastructure (PKI)
- Certificate Automation
- Ansible
- REST API Integration
- TLS/SSL and mTLS
- Linux Administration
- Python Scripting
- Shell/Bash Scripting
- X.509 Certificates
- Keystores and Truststores
- CI/CD
- GitHub Actions
- Jenkins
- Java Spring Boot
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Software
- Security & Safety
- Engineering
Keywords
- Public Key Infrastructure (PKI)
- TLS/SSL
- mTLS
- X.509 Certificates
- Certificate Authorities
- Key Management
- Keystores
- Truststores
- Ansible
- Infrastructure as Code
- REST APIs
- API Security
- JSON
- XML
- Linux
- Python
- Shell/Bash
- ServiceNow
- GitHub
- GitHub Actions
- Jenkins
- JFrog Artifactory
- Java Spring Framework
- Spring Boot
- Microservices
- HashiCorp Vault
- Terraform
- DevSecOps