Help secure the future of banking through enterprise-scale cryptographic innovation.The RoleCapco is seeking an experienced Cryptography Engineer. This newly created role will sit within a Crypto Certification team, responsible for validating and certifying enterprise data protection solutions and new cryptographic use cases before enterprise adoption.
Working at the intersection of cloud, cybersecurity, and financial services, you will collaborate closely with Crypto Requirements, Security Architecture, and Crypto Engineering teams to design, test, validate, and document cryptographic solutions that protect critical banking and payments infrastructure. This role offers the opportunity to influence the future of enterprise encryption, certificate management, and post-quantum cryptography initiatives.
What You'll Do- Lead the certification, validation, and testing of enterprise cryptographic and data protection solutions for banking environments.
- Design and build lab environments, develop test strategies, execute testing activities, and create operational runbooks and automation frameworks.
- Evaluate solutions protecting data at rest and data in transit, including encryption technologies, key management platforms, and certificate management systems.
- Produce technical blueprints, certification documentation, and recommendations for handover to Crypto Engineering teams for enterprise implementation.
- Collaborate with security architecture, cloud, infrastructure, and application teams to assess emerging cryptographic technologies, including post-quantum cryptography.
What We're Looking For- Minimum 7 years of IT experience within large enterprise environments, including at least 3 years focused on cryptography, encryption, or data protection technologies.
- Strong expertise in cryptographic standards and controls, including symmetric and asymmetric encryption, PKI, digital signatures, hashing, key lifecycle management, and certificate management.
- Experience validating encryption solutions across databases, storage platforms, applications, and cloud-based environments.
- Hands-on experience with technologies such as Thales Vormetric/CipherTrust, Venafi, Microsoft ADCS, TLS, SSH, x509 certificates, and encryption solutions for data at rest and data in transit.
- Proficiency in automation and scripting using Python, Bash, PowerShell, Ansible, API testing tools, and related automation frameworks.
Bonus Points For- Industry-recognized security certifications such as CISSP or equivalent.
- Experience supporting ransomware resilience and data protection strategies.
- Knowledge of Post-Quantum Cryptography standards, frameworks, and emerging industry adoption practices.
- Expertise with Windows, Unix, Linux, database platforms (SQL Server, Oracle, MongoDB), or enterprise storage technologies (SAN/NAS).
- Previous experience within banking, payments, or broader financial services environments.
Benefits- Comprehensive Benefits Coverage - 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
- Retirement Savings Program - RRSP with the option of receiving a matching employer contribution.
- Virtual Health Care and Employee & Family Assistance Program available for employees and eligible dependents.
- Enhanced parental leave top-up, new parent gift, and wellness reimbursement benefits.
- Business Coach from Day 1, providing personalized career guidance, development support, and growth opportunities.
Why This Role Is OpenWe are currently hiring for this role due to a newly created vacancy within our organization. This position has been established to support growing business demand and expanding cryptographic security initiatives. We are actively seeking a qualified professional who can make an immediate impact and help strengthen enterprise data protection capabilities.
