Turns out that the centrifydc installer was not performing the postinstall steps. Specifically, the systemd unit files were not being copied in place, and the init.d startup script depends on those to start.
The solution was to copy the files in a place that systemd would find them:
cp /usr/share/centrifydc/etc/systemd/system/{centrifydc.service,centrify-kcm.service} /etc/systemd/system/
OR
I also found that reinstalling the package worked:
mkdir rollin tar zxf centrify-suite-2018-deb7-x86_64.tgz -C rollin/ cd rollin/ dpkg --install ./centrifydc-5.5.0-deb7-x86_64.deb
It is unclear why the unit files failed to copy when I performed the install.sh via Puppet. But at least I have a solution now.