Posted 3 months ago
Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk
@ Astra North Infoteck Inc.
Brampton, Ontario
Overview
Astra North Infoteck Inc. is hiring a contract Enterprise CLM Operations Support Engineer in Brampton, ON, on a hybrid schedule of 2-3 days in the office. The role runs end-to-end certificate lifecycle management across PKI, Venafi/CyberArk, ADCS and cloud key stores, with scripting, monitoring and 24x7 incident support. Six to eight years of experience is expected.
Responsibilities:
- Manage end-to-end certificate lifecycle from discovery to retirement
- Administer and troubleshoot CLM platforms, connectors and enrollment policies
- Develop automation with PowerShell, Python or Bash and integrate REST APIs and ACMEv2
- Monitor certificate expiry, connector health and renewal exceptions
- Support P1-P4 incidents, RCA and 24x7 on-call rotation
Requirements summary:
- 6-8 years of hands-on PKI and certificate operations experience
- Venafi or CyberArk Certificate Manager experience
- Microsoft ADCS and Windows Certificate Store knowledge
- PowerShell scripting and REST API/ACMEv2 skills
- Preferred: CyberArk Sentry, Venafi Certified Professional, CKA, ITIL v4
Tools & skills
Source and dates
Source type not verified · zoho
- Employer posting date
- 2026-08-18
- First seen by our source
- 2026-10-11
- Source record updated
- 2026-10-11
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | IT |
| Experience | 6+ years |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | CyberArk Sentry - Certificate Manager, Venafi Certified Professional, Microsoft Windows Server/Identity, CKA, ITIL v4 |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Astra North Infoteck Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 426 |
Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk
Location: Brampton, ON
Work Model: Hybrid – 2–3 Days WFO
Experience: 6–8 Years
Primary Skill: Cyber Security
Position Summary
Seeking an experienced Enterprise Certificate Lifecycle Management (CLM) Operations Support Engineer with hands-on experience in PKI, SSL/TLS certificate management, Venafi/CyberArk, ADCS, automation, and enterprise certificate operations.
Key Responsibilities
- Manage end-to-end certificate lifecycle: discovery, enrollment, issuance, renewal, revocation, replacement, and retirement.
- Administer and troubleshoot enterprise CLM platforms, connectors, templates, and enrollment policies.
- Support PKI, Microsoft ADCS, Certificate Authorities, certificate chains, SAN, EKU, CRL/OCSP, and Windows Certificate Store.
- Develop automation using PowerShell, Python, or Bash and integrate certificate workflows through REST APIs and ACMEv2.
- Support certificates across Kubernetes cert-manager, Azure Key Vault, AWS ACM, KMS/Secrets Manager, and enterprise applications.
- Monitor certificate expiry, connector health, API failures, and renewal exceptions.
- Prepare SLA/KPI reports and operational dashboards.
- Support P1–P4 incidents, major incidents, RCA, problem management, and 24x7 on-call rotation when required.
- Maintain SOPs, runbooks, and knowledge documentation.
Essential Skills
- Enterprise Certificate Lifecycle Management (CLM)
- PKI / SSL/TLS / Microsoft ADCS
- Venafi or CyberArk Certificate Manager
- PowerShell scripting
- REST APIs and ACMEv2
- Windows Certificate Store / CAPI
- Certificate troubleshooting and lifecycle operations
Preferred Skills
- Keyfactor, DigiCert Trust Lifecycle Manager, AppViewX
- Kubernetes cert-manager
- Azure Key Vault, AWS ACM/KMS
- OpenSSL, keytool
- Python/Bash
- Splunk, Dynatrace, Prometheus, Grafana
Certifications – Preferred
CyberArk Sentry – Certificate Manager | Venafi Certified Professional | Microsoft Windows Server/Identity | CKA | ITIL v4
Journal
Only you can see this. Kept on this device, and in your account when you sign in.