Senior Security Platform Engineer / DevSecOps / Cloud Security Engineering

Please send your resume at anila.dada@amyantek.com if you are interested in this 5 month contract with Sunlife with a possibility of extension, If you are not interested, please feel free to pass it in your network for anyone looking for work. Position title: Senior Security Platform Engineer Working Status: Hybrid: Wednesday On-Site. Open to fully remote candidates across Canada if they can work EST hours Location: 1 York Street, Toronto Hours: EST Hours (9:00 a.m.–5:00 p.m.) Position Summary The Security Platform Engineering team is seeking an experienced Senior Security Platform Engineer to accelerate delivery of a large-scale TLS Certificate Rotation Program and enterprise Machine Identity Security initiatives. This hands-on engineering role focuses on certificate lifecycle automation, platform integrations, PKI modernization, and application onboarding. The successful candidate will work closely with application teams, infrastructure teams, cloud engineering teams, and security stakeholders to implement automated certificate management solutions and expand enterprise adoption of CyberArk Machine Identity Security (formerly Venafi) and HashiCorp Vault capabilities. The ideal candidate has strong experience in PKI, SSL/TLS certificates, automation engineering, cloud technologies, API integrations, and enterprise security platforms. Must have Requirements Technical Experience 5+ years of experience in Security Engineering, Infrastructure Engineering, Platform Engineering, or related disciplines.Strong experience with PKI, SSL/TLS certificates, and certificate lifecycle management.Hands-on experience with CyberArk Machine Identity Security (Venafi) or equivalent certificate management platforms.Experience implementing certificate automation at enterprise scale.Strong knowledge of cryptography principles, certificate trust chains, and machine identity security.Platform & Cloud Experience: Hands-on experience with several of the following:HashiCorp VaultAWS Certificate Manager (ACM)Amazon EKS / KubernetesMicrosoft GraphF5 Load BalancersAkamaiAzure and/or AWS cloud servicesREST APIs and platform integrationsAutomation & DevOps: Experience with:PythonPowerShellTerraformAnsibleGitCI/CD pipelinesInfrastructure as CodeAPI-based automationInfrastructure SkillsLinux and Windows administrationNetworking fundamentalsTLS/SSL protocolsLoad balancers and reverse proxiesKubernetes and container platformsMonitoring and logging solutions Preferred Qualifications Experience with HashiCorp Vault PKI Secrets Engine.Experience supporting large-scale certificate management programs.Experience working in Agile delivery environments.Security certifications such as CISSP, CCSP, Security+, GIAC, or equivalent.Experience supporting enterprise security platforms and cloud-native technologies. Success Measures During the contract term, the successful candidate will: Accelerate delivery of the enterprise SSL Certificate Rotation Program.Increase certificate lifecycle automation across strategic platforms.Deliver integrations with F5, Akamai, ACM, EKS, Microsoft Graph, HashiCorp Vault, and other enterprise technologies.Reduce manual certificate management activities through automation.Improve application onboarding velocity and adoption of automated certificate management services.Enhance operational efficiency, compliance, and overall machine identity security posture. Why This Opportunity This is an opportunity to play a key role in a high-visibility enterprise initiative focused on automation, machine identity security, PKI modernization, and cloud-native security engineering. The successful candidate will work on strategic security platforms and drive meaningful improvements in enterprise certificate management capabilities. Education: Bachelor Science degree in computer science Top Performer Profile A top performer is automation-first, quickly identifies operational improvement opportunities, and has strong hands-on skills for automating certificate processes and documentation. Key Responsibilities Certificate Lifecycle Automation Design, develop, and implement automated certificate lifecycle management solutions.Build automation for certificate issuance, renewal, deployment, rotation, and revocation.Support enterprise SSL certificate rotation initiatives across production and non-production environments.Identify and eliminate manual certificate management processes through automation. Machine Identity Security & Venafi Engineering Support and enhance CyberArk Machine Identity Security (Venafi) capabilities.Develop integrations between certificate management platforms and enterprise systems.Implement reusable onboarding and automation patterns for application teams.Improve certificate visibility, compliance, governance, and operational efficiency. Platform Integration Engineering Design and implement certificate management integrations with enterprise platforms including:F5AkamaiAWS Certificate Manager (ACM)Amazon EKS / KubernetesMicrosoft GraphHashiCorp VaultContainer platforms and cloud-native workloadsAdditional enterprise applications and infrastructure services HashiCorp Vault Automation Develop certificate automation solutions leveraging HashiCorp Vault PKI capabilities.Build and enhance integrations between Vault and enterprise applications.Create automated certificate issuance and rotation workflows.Support onboarding of applications to Vault-based certificate management services. Application Onboarding & Support Partner with application and infrastructure teams to implement certificate automation solutions.Provide technical guidance, troubleshooting, onboarding support, and best practices.Develop technical documentation, implementation guides, and operational runbooks.Lead knowledge-sharing and enablement sessions for stakeholders. Engineering & Delivery Develop automation using scripting, APIs, Infrastructure-as-Code, and DevOps practices.Participate in Agile delivery processes including backlog refinement, estimation, sprint planning, and implementation activities.Contribute to platform resiliency, monitoring, operational support, and continuous improvement initiatives.