Senior Security / PKI Engineer

emergiTEL Inc.; Toronto; On-site; CAD 120,000 - 160,000; Full time

Job summary

emergiTEL is seeking a Senior Security / PKI Engineer for our client in the Telecom industry. You will design, implement, and support secure certificate and key-management solutions across enterprise and connected-device environments, with hands-on PKI, HSMs, and cryptographic expertise.

The role emphasizes device security, secure boot, and IoT identity, with collaboration across security architects, DevOps, and infrastructure teams to align with FIPS-aligned architectures.

Qualifications

• Strong hands-on PKI, digital certificates, and HSM experience.
• Experience with certificate lifecycle management and secure boot.
• Knowledge of cryptographic security, TPM, and IoT security concepts.
• FIPS-aligned architectures and secure device identity practices.

Responsibilities

• Design, implement, and maintain enterprise PKI and certificate-management solutions.
• Manage the complete certificate lifecycle: issuance, renewal, revocation, rotation, deployment.
• Design and support cryptographic key-management processes and secure key lifecycles.
• Work with HSMs for secure generation, storage, and management of keys.
• Develop and document security standards, architectures, and operational processes.
• Collaborate with security architects, developers, DevOps, and infrastructure teams.
• Troubleshoot certificate, PKI, HSM, and cryptographic issues across environments.
• Participate in security reviews and implementation of security controls.
• Ensure solutions align with security policies and industry standards.

Skills

PKI & certificates

HSM management

IoT security

TPM

FIPS 140-2/140-3

Cryptographic key management

Security architecture

Job description

emergiTEL is hiring a Senior Security / PKI Engineer for our client in the Telecomindustry.

Position Overview

We are looking for a Senior Security / PKI Engineer with strong hands-on experience in Public Key Infrastructure (PKI), digital certificates, Hardware Security Modules (HSMs), cryptographic key management, and device security.

The successful candidate will be responsible for designing, implementing, and supporting secure certificate and key-management solutions across enterprise and connected-device environments. This role requires a strong understanding of cryptographic security, certificate lifecycle management, secure boot, TPM, IoT security, and FIPS-aligned architectures.

Key Responsibilities

• Design, implement, and maintain enterprise PKI and certificate-management solutions.
• Manage the complete certificate lifecycle, including certificate issuance, renewal, revocation, rotation, and deployment.
• Design and support cryptographic key management processes and secure key lifecycles.
• Work with HSMs (Hardware Security Modules) for secure generation, storage, protection, and management of cryptographic keys.
• Develop and maintain security architectures aligned with FIPS 140-2/140-3 and applicable security standards.
• Work with TPM (Trusted Platform Module) technologies and hardware-backed security.
• Design and support secure boot / trusted boot mechanisms.
• Support device identity, authentication, and certificate provisioning for IoT and connected devices.
• Apply IoT SAFE concepts and technologies for secure device identity and credential management.
• Evaluate cryptographic implementations and identify potential security risks or weaknesses.
• Develop and document security standards, architecture patterns, procedures, and operational processes.
• Collaborate with security architects, infrastructure engineers, developers, DevOps teams, and other technical stakeholders.
• Troubleshoot certificate, PKI, HSM, and cryptographic issues across development, test, and production environments.
• Participate in security reviews, technical assessments, and implementation of security controls.
• Ensure solutions follow organizational security policies, industry standards, and regulatory requirements.