Senior Security Consultant

Job summary

Design, implement, migrate, and operate enterprise on-premises PKI and certificate lifecycle solutions using Entrust CSP, including CA hierarchies, HSM integration, automation, and integrations with identity and application platforms. Establish cryptographic governance and compliance controls, assess trust risks, and produce operational procedures, disaster recovery plans, incident response playbooks, and architecture documentation.

Job details

Hello, We are currently hiring a "Senior Security Consultant" for one of our client based out in Canada. Please let me know if you are interested. Title: Senior Security Consultant – PKI & Certificate Lifecycle (Entrust CSP) Location: Toronto, ON/Remote Role Contract: 06+ Months Role Summary We are seeking a Senior Security Consultant – PKI & Certificate Lifecycle Management with 10–15 years of cybersecurity and infrastructure security experience and deep hands-on expertise in enterprise PKI architecture, deployment, and operations. The consultant will support a government healthcare entity in Alberta, delivering secure, scalable, and compliant on-premises Public Key Infrastructure (PKI) and certificate lifecycle management solutions using Entrust Certificate Services Platform (CSP). This role requires strong expertise in cryptography, identity trust services, certificate lifecycle governance, and security architecture, along with experience operating in regulated healthcare/public-sector environments. The consultant will lead design, implementation, migration, automation, and operationalization of enterprise PKI aligned with security frameworks and compliance obligations. Responsibilities: PKI Architecture & Design - Design and implement enterprise on-prem PKI architecture including Offline Root CA and Issuing CA hierarchy. - Integrate Hardware Security Modules (HSM) for key protection and signing operations. - Architect and deploy Entrust Certificate Services Platform (CSP). - Develop PKI trust models supporting healthcare applications and identity systems. Certificate Lifecycle Management (CLM) - Implement automated certificate enrollment, renewal, revocation, and discovery workflows using Entrust CSP. - Integrate CLM processes with Active Directory, network devices, and application platforms. - Establish certificate governance frameworks including inventory tracking and expiration monitoring. Cryptography & Security Engineering - Implement strong cryptographic standards (RSA, ECC, TLS 1.2/1.3). - Perform key lifecycle management aligned to NIST standards. - Support certificate usage for TLS, code signing, email encryption, and device authentication. Healthcare & Government Compliance - Align PKI controls with Government of Alberta security policies and Canadian healthcare regulations. - Support audit readiness and compliance reporting related to cryptographic key management. Migration & Modernization Initiatives - Lead PKI modernization or migration initiatives including migration to Entrust CSP. - Conduct risk assessments and trust gap analysis across applications and infrastructure. Security Operations & Documentation - Develop PKI operational procedures, disaster recovery plans, and incident response playbooks. - Produce architecture diagrams, certificate lifecycle workflows, and governance documentation. Required Qualifications - 10–15 years of IT/cybersecurity experience with 5+ years dedicated to enterprise PKI. - Hands-on experience designing and implementing on-prem PKI. - Strong experience with Entrust Certificate Services Platform (CSP). - Expertise in cryptographic standards, PKI trust models, and certificate-based authentication. - Experience integrating PKI with Active Directory, network/security appliances, and application platforms. Preferred Qualifications - Experience with Entrust nShield HSM or equivalent. - Familiarity with Client ADCS and hybrid PKI architectures. - Experience implementing certificate automation for DevOps/Kubernetes environments. - Knowledge of post-quantum cryptography readiness strategies. Certifications (Preferred) PKI/Product Certifications: - Entrust PKI / Certificate Services Platform Certification - Certified Encryption Specialist (ECES) Cybersecurity Certifications (Preferred): - CISSP - CCSP - CISM or CISA Infrastructure/Security Certifications (Preferred): - CCNP Security / CCIE Security - CompTIA Security+ / CySA+ Thankyou Shivam Sengar

What you’ll do

Design, implement, migrate, and operate enterprise on-premises PKI and certificate lifecycle solutions using Entrust CSP, including CA hierarchies, HSM integration, automation, and integrations with identity and application platforms. Establish cryptographic governance and compliance controls, assess trust risks, and produce operational procedures, disaster recovery plans, incident response playbooks, and architecture documentation.

Requirements

Requires 10–15 years of IT or cybersecurity experience, including at least five years focused on enterprise PKI, with hands-on experience designing and implementing on-premises PKI and strong Entrust CSP expertise. Candidates should also have expertise in cryptographic standards and PKI trust models, and experience integrating PKI with Active Directory, network/security appliances, and application platforms; relevant certifications and HSM experience are preferred.

Listed skills

• Active Directory · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Enterprise PKI Architecture
• Entrust Certificate Services Platform
• Certificate Lifecycle Management
• On-Premises PKI
• Hardware Security Modules
• Cryptography
• RSA
• ECC
• TLS 1.2/1.3
• Active Directory
• Certificate-Based Authentication
• Key Lifecycle Management
• PKI Migration
• Security Architecture
• Compliance Reporting
• DevOps/Kubernetes Certificate Automation

Job areas

• Security & Safety
• Technology
• Consulting
• Government & Public Sector
• Healthcare

More jobs from Artech