PKI & Certificate Automation Engineer
- ON, Canada
- Ontario, Canada, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Position: PKI & Certificate Automation Engineer
Job type: Full-time/Permanent hiring
Location: Hybrid/Onsite- Toronto, ON
We are seeking a highly skilled Senior PKI & Certificate Automation Engineer with strong expertise in Digital Certificate Lifecycle Management, PKI Infrastructure, TLS/mTLS Security, Ansible Automation, and API Integration. The ideal candidate will lead the design and implementation of automated certificate issuance, renewal, deployment, and compliance workflows across large-scale enterprise environments.
This role requires deep hands-on experience with Ansible automation, REST API integrations, Linux administration, Python scripting, ServiceNow workflow automation, and certificate management ecosystems to support secure application delivery and infrastructure modernization initiatives.
Key Responsibilities
- Design, develop, and maintain enterprise-scale certificate lifecycle automation solutions.
- Automate certificate provisioning, renewal, deployment, revocation, and compliance monitoring using Ansible.
- Integrate PKI platforms, Certificate Authorities (CA), and certificate management tools using REST APIs.
- Troubleshoot and resolve TLS, SSL, mTLS, certificate chain, truststore, and keystore-related issues.
- Develop reusable Ansible playbooks, roles, collections, and workflow orchestration solutions.
- Build API-driven integrations for security, infrastructure, and application platforms.
- Collaborate with DevOps, Security, Infrastructure, and Application teams to ensure secure service delivery.
- Automate ServiceNow change management and governance workflows.
- Support CI/CD pipelines utilizing GitHub, GitHub Actions, Jenkins, and Artifactory.
- Work closely with Java Spring Boot application teams to support secure certificate integration requirements.
Required Technical Skills
PKI & Certificate Management
- 5+ years of hands-on experience with:
- Public Key Infrastructure (PKI)
- Digital Certificate Management
- Certificate Lifecycle Automation
- TLS/SSL and mTLS
- Certificate Issuance & Renewal
- Key Management
- X.509 Certificates
- Keystores & Truststores
- Certificate Troubleshooting
Ansible Automation
- 5+ years of experience developing and supporting:
- Ansible Playbooks
- Roles and Collections
- Workflow Automation
- Infrastructure as Code (IaC)
- Enterprise Automation Platforms
API Integration
- 5+ years of experience with:
- RESTful APIs
- API Automation
- API Security
- Cross-Platform Integrations
- JSON/XML Processing
Linux & Scripting
- Strong Linux Administration experience.
- Python and Shell/Bash scripting expertise.
- Automation framework development experience.
Enterprise Tooling
- ServiceNow
- GitHub
- GitHub Actions
- Jenkins
- JFrog Artifactory
Application & Platform Knowledge
- Java
- Spring Framework
- Spring Boot Microservices
- Secure Application Delivery
Nice to Have
- HashiCorp Vault
- Terraform
- Secrets Management
- Cloud Infrastructure Automation
- DevSecOps Practices
- Financial Services Industry Experience
More about this job
Responsibilities
Design and maintain enterprise certificate lifecycle automation, including certificate provisioning, renewal, deployment, revocation, and compliance monitoring using Ansible and REST API integrations. Troubleshoot certificate and TLS issues, automate ServiceNow and CI/CD workflows, and collaborate with security, infrastructure, DevOps, and application teams to support secure service delivery.
Requirements
Requires 5+ years of experience in PKI and certificate management, Ansible automation, and REST API integration, along with strong Linux administration and Python and Shell/Bash scripting skills. Candidates should also have experience with enterprise tooling such as ServiceNow, GitHub, Jenkins, and Artifactory, and knowledge of Java Spring Boot and secure application delivery.
Skills
- Public Key Infrastructure (PKI)
- TLS/SSL and mTLS
- Ansible
- REST API Integration
- Linux Administration
- Python Scripting
- Shell/Bash Scripting
- X.509 Certificates
- Keystores and Truststores
- Infrastructure as Code
- CI/CD
- Java Spring Boot
- Certificate Troubleshooting
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Software
- Security & Safety
- Engineering
Keywords
- Public Key Infrastructure (PKI)
- TLS/SSL
- mTLS
- Ansible
- REST APIs
- API Security
- Linux
- Python
- Shell/Bash
- ServiceNow
- GitHub
- GitHub Actions
- Jenkins
- JFrog Artifactory
- Java Spring Framework
- Spring Boot
- Microservices
- X.509 Certificates
- Keystores
- Truststores
- Infrastructure as Code
- CI/CD
- HashiCorp Vault
- Terraform
- Secrets Management
- DevSecOps
- JSON/XML Processing
- Certificate Authorities