Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk

Job Description Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk Location: Brampton, ON Work Model: Hybrid – 2–3 Days WFO Experience: 6–8 Years Primary Skill: Cyber Security Position Summary Seeking an experienced Enterprise Certificate Lifecycle Management (CLM) Operations Support Engineer with hands-on experience in PKI, SSL/TLS certificate management, Venafi/CyberArk, ADCS, automation, and enterprise certificate operations . Key Responsibilities Manage end-to-end certificate lifecycle: discovery, enrollment, issuance, renewal, revocation, replacement, and retirement. Administer and troubleshoot enterprise CLM platforms, connectors, templates, and enrollment policies. Support PKI, Microsoft ADCS, Certificate Authorities, certificate chains, SAN, EKU, CRL/OCSP , and Windows Certificate Store. Develop automation using PowerShell, Python, or Bash and integrate certificate workflows through REST APIs and ACMEv2. Support certificates across Kubernetes cert-manager, Azure Key Vault, AWS ACM, KMS/Secrets Manager , and enterprise applications. Monitor certificate expiry, connector health, API failures, and renewal exceptions. Prepare SLA/KPI reports and operational dashboards. Support P1–P4 incidents, major incidents, RCA, problem management, and 24x7 on-call rotation when required. Maintain SOPs, runbooks, and knowledge documentation. Essential Skills Enterprise Certificate Lifecycle Management (CLM) PKI / SSL/TLS / Microsoft ADCS Venafi or CyberArk Certificate Manager PowerShell scripting REST APIs and ACMEv2 Windows Certificate Store / CAPI Certificate troubleshooting and lifecycle operations Preferred Skills Keyfactor, DigiCert Trust Lifecycle Manager, AppViewX Kubernetes cert-manager Azure Key Vault, AWS ACM/KMS OpenSSL, keytool Python/Bash Splunk, Dynatrace, Prometheus, Grafana Certifications – Preferred CyberArk Sentry – Certificate Manager | Venafi Certified Professional | Microsoft Windows Server/Identity | CKA | ITIL v4