Aviva

Senior Cryptography Analyst

Aviva • $100K — $125K *
Markham, ON L3R 0G6In-Person
Finance & Insurance
Less than 5 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 5-7 years of experience in cryptography, encryption, PKI, and secrets management.
  • Proficient in managing enterprise encryption keys and HashiCorp Vault services.
  • Experienced in Post-Quantum Cryptography assessments and readiness planning.
  • Solid understanding of encryption standards and cryptographic algorithms.
  • Familiarity with cloud services, specifically AWS and KMS technologies.
  • Strong scripting and automation skills using APIs and CI/CD pipelines.
  • Leadership experience in a 24x7 operational environment.

Responsibilities

  • Act as the enterprise Subject Matter Expert (SME) for cryptography and encryption strategies.
  • Own governance and lifecycle management of enterprise encryption keys and secrets.
  • Provide administration and operational oversight of HashiCorp Vault platforms.
  • Drive automation for TLS/SSL certificate management and lifecycle processes.
  • Lead enterprise readiness assessments for Post-Quantum Cryptography.
  • Provide operational leadership for critical cryptographic services and manage incidents.
  • Ensure compliance with regulations and maintain governance frameworks for cryptographic assets.

Benefits

  • Compelling rewards package including base compensation and annual bonus eligibility.
  • Outstanding career development opportunities and professional education support.
  • Competitive vacation package with the option to purchase additional days off.
  • Employee-driven programs emphasizing diversity and inclusion initiatives.
  • Corporate wellness programs for physical and mental health support.
  • Hybrid flexible work model accommodating remote work.
Full Job Description
The Senior Cryptography Analyst plays a critical security role responsible for safeguarding Aviva Canada's cryptographic assets, ensuring the secure management of keys, secrets, and certificates, driving Post-Quantum Cryptography readiness, and providing governance and operational oversight of two business-critical 24x7 cryptographic services. This role serves as a trusted advisor on cryptographic strategy, compliance, operational excellence, and future-state cryptographic transformation.

What you'll do

Cryptography Governance & Advisory
  • Act as the enterprise SME for cryptography, encryption, PKI, and secrets management.
  • Advise teams on encryption strategies, cryptographic controls, and approved solutions.
  • Develop and maintain cryptographic standards, procedures, and guidelines.
  • Review solution designs and provide guidance on encryption at rest/in transit, key and secrets management, certificates, and algorithms.
  • Support security architecture reviews and risk assessments.


Encryption Key & Secrets Lifecycle Management
  • Own governance and lifecycle management of enterprise encryption keys and secrets.
  • Oversee key generation, storage, rotation, archival, and destruction.
  • Manage HashiCorp Vault services and protect privileged secrets and cryptographic assets.
  • Ensure compliance with industry standards and regulatory requirements.
  • Define and monitor key management benchmarks and the efficiency of operations.


HashiCorp Vault Service Ownership
  • Provide administration and operational oversight of HashiCorp Vault platforms.
  • Manage authentication, RBAC, access governance, secrets lifecycle, and tenant onboarding/offboarding.
  • Support integrations with AWS KMS, HSMs, cloud secret stores, and automation platforms.
  • Lead efforts to fix issues, incident resolution, and platform modernization initiatives.


TLS Certificate Lifecycle & Automation
  • Own TLS/SSL certificate governance and lifecycle management.
  • Oversee certificate issuance, renewal, replacement, revocation, and retirement.
  • Drive automation using ACME, Sectigo, Vault PKI, Cert-Manager, Kubernetes, and cloud-native services.
  • Establish certificate standards for CAs, key lengths, algorithms, and ownership.
  • Reduce manual processes through automation and continuous improvement.


Post-Quantum Cryptography (PQC) Assessment & Readiness
  • Lead enterprise PQC readiness assessments.
  • Maintain visibility of cryptographic assets across applications, certificates, keys, and secrets.
  • Assess PQC risks and develop transition and remediation strategies.
  • Partner with architecture and engineering teams on migration planning.
  • Monitor industry and regulatory developments in quantum-resistant cryptography.


Operational Leadership & Service Management
  • Provide operational leadership for TLS Certificate Management and HashiCorp Vault services.
  • Oversee contractor resources, service delivery, and operational priorities.
  • Monitor service performance, availability, incidents, and improvement opportunities.
  • Ensure resilience, availability, and continuous service enhancement.


Incident, Change & Critical Issue Management
  • Function as the main point of contact for major incidents, emergencies, and service outages related to customer concerns.
  • Participate in after-hours support and incident response.
  • Lead root cause analysis and remediation of cryptography-related issues.
  • Support change management, CAB activities, and proactive risk mitigation.


HSM & Root of Trust Management
  • Support enterprise HSM infrastructure, including Thales Luna HSM platforms.
  • Manage auto-unseal configurations, root key protection, key rotation, and disaster recovery.
  • Coordinate platform upgrades and lifecycle management.
  • Maintain secure root-of-trust controls across cryptographic services.


Compliance, Risk & Audit Governance
  • Serve as the authority for enterprise cryptographic compliance and governance.
  • Ensure alignment with security policies, regulations, audit requirements, and governance frameworks.
  • Support audits and maintain compliance evidence and reporting.
  • Identify and remediate cryptographic risks and control gaps.


Monitoring, Reporting & Service Metrics
  • Develop executive and operational reporting for cryptographic services.
  • Track critical metrics covering Vault health, certificate management, automation, compliance, and PQC readiness.
  • Leverage monitoring and reporting tools including Dynatrace, Rapid7, SiteScope, Power BI, and Excel.
  • Provide insights to improve service performance and governance.


What you'll bring

Technical Expertise
  • Extensive experience with HashiCorp Vault administration and governance.
  • Strong PKI and TLS certificate lifecycle management experience.
  • Experience implementing and supporting TLS certificate automation solutions.
  • Experience performing Post-Quantum Cryptography assessments and readiness planning.
  • Solid understanding of encryption standards, cryptographic algorithms, and key management practices.
  • Experience with Hardware Security Modules (Thales Luna preferred).
  • Knowledge of AWS cloud services and KMS technologies.
  • Experience integrating cryptographic services into enterprise platforms and applications.
  • Scripting and automation experience using APIs and CI/CD pipelines.


Leadership & Governance
  • Experience leading vendors, consultants, or contract resources.
  • Ability to influence security and technology decisions across multiple teams.
  • Strong understanding of regulatory, audit, and compliance requirements.
  • Experience operating critical production services within a 24x7 environment.
  • Strong incident and problem management experience.


What makes you stand out
  • Experience in insurance or financial services.
  • Kubernetes and Cert-Manager experience.
  • Cloud security and DevSecOps experience.
  • PQC frameworks, standards, and industry transition planning experience.


What you'll get

  • The salary band for this position ranges from $100,000 to $125,000. Please note that individual salary is determined by factors such as job-related knowledge, skills and experience, as well as internal equity.
  • Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
  • Outstanding Career Development opportunities.
  • We'll support your professional development education.
  • Competitive vacation package with the option to purchase 5 extra days off per year.
  • Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
  • Corporate wellness programs to support our employees' physical and mental health.
  • Employee discount on home and auto insurance (where applicable).
  • Hybrid flexible work model.


This job advertisement is for an existing vacancy which has been posted both internally & externally.

Aviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position.

#LI-PS1
#LI-Hybrid

About Aviva

Natural health retailer and resource. Aviva promotes a holistic approach to your health and well-being through proper nutrition and a healthy, natural lifestyle. Aviva operates a retail store in Winnipeg, MB Canada and serves customers across Canada and around the world through www.avivahealth.com. Everything for healthy living.

Aviva Careers

Joining Aviva presents a prime opportunity to be part of a team that values leadership, innovation, and diversity in the workplace. Aviva, a leading insurance and financial services company, offers a variety of job opportunities that cater to a range of skills and professional interests, making it an ideal place for career growth and development.

Explore Job Opportunities

Aviva is actively hiring and continuously seeks passionate, creative, and solution-driven team players. Search open positions that match individual skills and interests in areas ranging from finance to technology. Each position at Aviva offers the chance to work with a global team that drives industry-leading solutions.

Experience Professional Growth

Aviva is committed to the professional growth of its employees. The company offers unmatched training, development, and certification support, allowing every team member to reach their full potential. Leadership and diversity training are integral parts of Aviva's commitment to fostering an inclusive environment.

Internship Programs

Start a career at Aviva with an internship that offers real-world experience and networking opportunities. Aviva's internships provide a robust platform for learning and applying practical skills in a dynamic setting, preparing interns for full-time positions within the company.

Benefits and Culture

Aviva is renowned for its employee benefits and positive company culture. The company prioritizes the well-being and satisfaction of its team, offering comprehensive benefits that enhance both personal and professional life. Aviva's culture is built on a foundation of respect for diversity and an ongoing commitment to inclusion.

Innovation and Networking

At Aviva, innovation is at the core of all operations. Employees are encouraged to lead transformation projects and introduce new strategies that drive growth and efficiency. Networking within Aviva provides connections to industry leaders and peers who are equally eager to share insights and collaborate on projects.

Career Advancement

Aviva believes in nurturing talent and providing employees with opportunities for advancement. Whether through promotions, cross-departmental moves, or leadership roles, team members have numerous paths to elevate their careers.

Join the Aviva Team

Interested candidates are encouraged to apply. Prepare a resume, practice for the interview, and explore the exciting employment and career opportunities at Aviva. Personalize job alerts to stay informed about the latest news and positions that align with career preferences and skills.

Stay Connected with Aviva Careers

Keep up to date with career tips, insider perspectives, and industry-leading insights—all from the professionals who are part of Aviva. Explore what it means to work at a company where innovation, leadership, and diversity are valued above all.

READ CAREERS BLOG

Job Alert Emails

Subscribe to receive job alerts, latest news, and insider tips tailored to preferences. Discover the rewarding opportunities that await at Aviva, a company committed to the professional and personal growth of its employees.
Learn more about Aviva
Size
28,596 employees
Industry
Finance & Insurance
NASDAQ
AVVIY
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Aviva

More Finance & Insurance Jobs

  • Accounting Manager
    St. Mary Development Corporations
    Dayton, OH 45402 (Montgomery County)
    Yesterday
  • Controller
    $110K — $120K *
    I & A Recruiting
    Crystal Lake, IL 60014 (Mchenry County)
    6 days ago
  • Partner
    $200K — $500K+*
    Confidential Company
    Los Angeles, CA 90001 (Los Angeles County)
    2 weeks ago
  • MasterCard
    Director, Risk Management
    $163K — $269K *
    MasterCard
    Purchase, NY 10577 (Westchester County)
    Reposted Today
  • AvidXchange
    Change Management Lead
    $95K — $115K *
    AvidXchange
    Charlotte, NC 28269 (Mecklenburg County)
    Today

Find similar Senior Cryptography Analyst jobs:

NationwideMarkham, ON