PKI DigiCert Consultant

Systematix is currently seeking an experienced, technical PKI Consultant with hands-on experience configuring DigiCert CA & Microsoft AD CS to support our client, a leading Toronto-based healthcare organization, with a specialized Public Key Infrastructure (PKI) and certificate management initiative. This is a short-term consulting assignment, 4 weeks to start with possible extensions; onsite 3 days per week in downtown Toronto.

ABOUT THE PROJECT

Systematix is supporting a major Canadian healthcare organization with an initiative focused on Public Key Infrastructure (PKI), digital certificate management and certificate lifecycle automation.

The successful candidate will provide hands-on technical expertise in DigiCert Private Certificate Authority (CA), DigiCert Trust Lifecycle Manager, Microsoft Active Directory Certificate Services (AD CS) and automated certificate management across Windows and Linux environments.

This is a short-term consulting engagement requiring a highly experienced PKI specialist who can work independently, collaborate with technical stakeholders and deliver practical solutions within an established enterprise infrastructure environment. The engagement is expected to last approximately four weeks, with the possibility of additional work.

ABOUT THE RESPONSIBILITIES

• Provide specialized technical expertise in enterprise Public Key Infrastructure (PKI) and digital certificate management.
• Configure and support DigiCert Private Certificate Authority (CA) environments.
• Implement and configure DigiCert Trust Lifecycle Manager for certificate lifecycle management.
• Configure and support Microsoft Active Directory Certificate Services (AD CS).
• Implement automated certificate enrollment and renewal using the Automated Certificate Management Environment (ACME) protocol.
• Configure ACME integrations for private and public certificate authorities across Windows and Linux environments.
• Configure and troubleshoot certificate deployment and management within Microsoft IIS environments.
• Implement certificate trust deployment using Active Directory Group Policy.
• Troubleshoot certificate issuance, renewal, validation and trust-related issues.
• Review existing PKI configurations and identify opportunities to improve certificate management and automation.
• Collaborate with infrastructure, security and application teams to support PKI integration requirements.
• Develop and maintain technical documentation covering configurations, processes and implemented solutions.
• Provide knowledge transfer and technical guidance to internal IT teams.
• Work collaboratively with an existing technical resource providing project oversight.

REQUIREMENTS – Must-have

• Demonstrated hands-on experience with enterprise Public Key Infrastructure (PKI) technologies and concepts.
• Strong working knowledge of DigiCert Private Certificate Authority (CA).
• Hands-on experience implementing or administering DigiCert Trust Lifecycle Manager.
• Experience configuring and supporting Microsoft Active Directory Certificate Services (AD CS).
• Experience implementing ACME-based certificate automation for both private and public certificate authorities.
• Experience configuring certificate management and automation across Windows and Linux environments.
• Strong working knowledge of Microsoft Internet Information Services (IIS).
• Experience using Active Directory Group Policy to deploy and manage certificate trust.
• Strong troubleshooting and problem-solving skills related to digital certificates, certificate authorities and PKI infrastructure.
• Ability to work independently and deliver technical solutions within a short-term engagement.
• Strong communication and documentation skills.
• Ability to work onsite in Toronto three days per week.

Nice-to-have

• Experience delivering PKI implementation or modernization projects in large enterprise environments.
• Experience working within healthcare or other highly regulated environments.
• Experience with certificate lifecycle automation and enterprise certificate management platforms.
• Experience integrating DigiCert solutions with Microsoft infrastructure.
• Experience with certificate security, authentication and trust management.
• Knowledge of TLS/SSL certificates, certificate chains, certificate revocation and related security protocols.
• Experience developing PKI operational procedures and technical documentation.
• Experience providing knowledge transfer to infrastructure and security teams.
• Relevant Microsoft, DigiCert or cybersecurity certifications.

ABOUT THE ROLE

Position: Senior PKI Consultant – DigiCert / Microsoft AD CS

Location: Toronto, Ontario; Hybrid – three days onsite per week

Start: ASAP

Engagement Type: Short-term consulting contract

PAY DISCLOSURE

Proposed Hourly Rate: $100–120/hr CAD

Compensation is commensurate with experience, specialized DigiCert expertise, Microsoft PKI knowledge and demonstrated experience implementing enterprise certificate management solutions.

AI DISCLOSURE

Systematix may use artificial intelligence (AI) or other automated tools to support portions of our recruitment process. No automated system is used to make hiring decisions.

ABOUT SYSTEMATIX

Systematix is one of Canada's largest privately owned national consulting and resourcing firms. With offices across North America, we deliver high-calibre consulting services and technology professionals to clients across all levels of government and the private sector.

Systematix is committed to fostering a diverse, inclusive workplace and is proud to be an equal opportunity employer.

Systematix. Results Focused. People Driven.