AL
Enterprise (CLM) Operations Support Engineer
Artech LLC
🇨🇦 Canada
On-site
Manager or above
1 month ago
- CyberArk
- PKI
- Active Directory
- REST API
- PowerShell
- Python
- Bash
- CI/CD
- Kubernetes
- TLS
- Microservices
- Azure
- SSL/TLS
- Windows
- Splunk
- Dynatrace
- Prometheus
- Grafana
- Incident Management
- Sentry
- Windows Server
- CKA
- ITIL
1 month ago
Location: Brampton, ON - Hybrid (2-3 Days WFO)
Duration: 6-12 months
Pay Range: C$50 INCÂ
Enterprise Certificate lifecycle management, Venfi/CyberArk Certificate Management certified and experienced
Role Descriptions: Certificate Lifecycle OperationsManage certificate discovery| enrollment| issuance| renewal| revocation| replacement| and retirement activities.Maintain accurate certificate inventory| ownership| and lifecycle records.Support large-scale certificate renewal events and emergency certificate replacement procedures.Ensure compliance with enterprise PKI standards| security policies| and audit requirements.CLM Platform AdministrationAdminister and support SaaS-based Certificate Lifecycle Management platforms and Satellite / Connector components.Configure certificate templates| enrollment policies| and integration connectors.Monitor connector health| synchronization status| and platform availability.Troubleshoot enrollment failures| renewal failures| connector communication issues| and API-related errors.PKI & Security SupportSupport enterprise Public Key Infrastructure (PKI) operations.Integrate with Client Active Directory Certificate Services (ADCS) and external Certificate Authorities.Validate certificate chains| SAN entries| EKU usage| CRL/OCSP responses| and trust relationships.Support private key protection| certificate governance| and audit logging requirements.Automation & IntegrationUtilize REST APIs for certificate enrollment| renewal| revocation| import/export| and reporting operations.Develop or maintain automation scripts using PowerShell| Python| Bash| or equivalent scripting languages.Support ACMEv2-based certificate automation for enterprise workloads.Assist with CI/CD and infrastructure automation integrations where applicable.Cloud & Kubernetes SupportSupport certificate operations for Kubernetes cert-manager environments.Manage TLS certificates for Ingress Controllers| APIs| microservices| and containerized applications.Support cloud-based certificate and key management services| including:Azure Key VaultAWS Certificate Manager (ACM)AWS KMS / Secrets ManagerOther enterprise cloud key management solutionsMonitoring & ReportingImplement proactive monitoring for:Certificate expiryConnector healthAPI failuresEnrollment and renewal exceptionsGenerate operational dashboards| SLA reports| KPI metrics| and monthly service reports.Participate in governance reviews and continuous service improvement initiatives.
Essential Skills: Experience with Enterprise Certificate Lifecycle Management (CLM) platformsStrong understanding of PKI concepts and certificate lifecycle processesHands-on experience with SSL/TLS certificate managementExperience with Client ADCSKnowledge of ACMEv2 enrollment and renewal workflowsExperience managing Windows Certificate Store / CAPIExperience with REST API integrationsProficiency in PowerShell scriptingPreferredExperience with CyberArk Certificate Manager SaaS| Venafi| Keyfactor| DigiCert Trust Lifecycle Manager| AppViewX| or similar enterprise CLM platformsKubernetes cert-managerAzure Key VaultAWS ACM / KMSOpenSSL| keytool| and certificate troubleshooting utilitiesPython or Bash scriptingEnterprise monitoring tools such as Splunk| Dynatrace| Prometheus| Grafana| or equivalentOperational Support ExpectationsProvide 8x5 operational support with participation in 24x7 on-call / follow-the-sun support rotation when required.Support P1P4 incident management and major incident bridge activities.Perform Root Cause Analysis (RCA) and contribute to problem management remediation plans.Maintain operational runbooks| SOPs| and knowledge base documentation.Preferred CertificationsCyberArk Sentry Certificate Manager (preferred)Venafi Certified ProfessionalClient Certified: Windows Server / IdentityCertified Kubernetes Administrator (CKA) (nice to have)ITIL v4 Foundation
Desirable Skills:
Keyword:
Skills: Cyber Security
Experience Required: 6-8
Custom Fields:
Name: Business Vertical
Value: CL-CMTS
Name: Work Location CDF
Value: ~BRAMPTON, ONTARIO~
Name: Requisition ID
Value: 10928041
Name: Assets
Value: None
Name: Child
Value: IS-CMTS-4.3
Name: Parent
Value: IS-CMTS-4-Parent
Name: Type of Asset
Value: None
Name: Work Assignment Location
Value: Hybrid
Enterprise (CLM) Operations Support Engineer · Artech LLC