Hey @zespri,
thanks a lot for your interest.
TraefikEE is divided in something we call the control-plane and the data-plane. The data-plane can be seen as the regular proxy, while the control-plane handles the management, which is i.e. requesting data from the orchestrator, or in your specific case, management let's encrypt certificates. Once the control-plane has managed to fetch certificates, these are being distributed to the data-plane.
If you're interested in trying that out by yourself, head over to https://containo.us/traefikee/ and request a free trial key 
If you have further question about EE or want to discuss about your project / usecase, let's chat via email. manuel@containo.us - I'm happy to help 