Help secure the future of banking through enterprise-scale cryptographic innovation.
The RoleCapco is seeking an experienced Cryptography Engineer. This newly created role will sit within a Crypto Certification team, responsible for validating and certifying enterprise data protection solutions and new cryptographic use cases before enterprise adoption.
Working at the intersection of cloud, cybersecurity, and financial services, you will collaborate closely with Crypto Requirements, Security Architecture, and Crypto Engineering teams to design, test, validate, and document cryptographic solutions that protect critical banking and payments infrastructure. This role offers the opportunity to influence the future of enterprise encryption, certificate management, and post-quantum cryptography initiatives.
What You’ll Do- Lead the certification, validation, and testing of enterprise cryptographic and data protection solutions for banking environments.
- Design and build lab environments, develop test strategies, execute testing activities, and create operational runbooks and automation frameworks.
- Evaluate solutions protecting data at rest and data in transit, including encryption technologies, key management platforms, and certificate management systems.
- Produce technical blueprints, certification documentation, and recommendations for handover to Crypto Engineering teams for enterprise implementation.
- Collaborate with security architecture, cloud, infrastructure, and application teams to assess emerging cryptographic technologies, including post-quantum cryptography.
- Minimum 7 years of IT experience within large enterprise environments, including at least 3 years focused on cryptography, encryption, or data protection technologies.
- Strong expertise in cryptographic standards and controls, including symmetric and asymmetric encryption, PKI, digital signatures, hashing, key lifecycle management, and certificate management.
- Experience validating encryption solutions across databases, storage platforms, applications, and cloud-based environments.
- Hands-on experience with technologies such as Thales Vormetric/CipherTrust, Venafi, Microsoft ADCS, TLS, SSH, x509 certificates, and encryption solutions for data at rest and data in transit.
- Proficiency in automation and scripting using Python, Bash, PowerShell, Ansible, API testing tools, and related automation frameworks.
- Industry-recognized security certifications such as CISSP or equivalent.
- Experience supporting ransomware resilience and data protection strategies.
- Knowledge of Post-Quantum Cryptography standards, frameworks, and emerging industry adoption practices.
- Expertise with Windows, Unix, Linux, database platforms (SQL Server, Oracle, MongoDB), or enterprise storage technologies (SAN/NAS).
- Previous experience within banking, payments, or broader financial services environments.
- Deliver high-impact technology solutions for Tier 1 financial institutions.
- Work in a collaborative, flat, and entrepreneurial consulting culture.
- Access continuous learning, training, and industry certifications.
- Be part of a team shaping the future of digital financial services.
- Help shape the future of cybersecurity, cloud transformation, and cryptographic innovation across banking and payments.
- Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
- Retirement Savings Program – RRSP with the option of receiving a matching employer contribution.
- Virtual Health Care and Employee & Family Assistance Program available for employees and eligible dependents.
- Enhanced parental leave top-up, new parent gift, and wellness reimbursement benefits.
- Business Coach from Day 1, providing personalized career guidance, development support, and growth opportunities.
We are currently hiring for this role due to a newly created vacancy within our organization. This position has been established to support growing business demand and expanding cryptographic security initiatives. We are actively seeking a qualified professional who can make an immediate impact and help strengthen enterprise data protection capabilities.
Inclusion at CapcoWe’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
Use of Artificial Intelligence in Talent AcquisitionAt Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.
AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.
Pay Transparency
The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.
Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.
Capco Toronto, Ontario, CAN Office
First Canadian Place, Suite 5010, 100 King Street West, Toronto, Ontario, Canada, M5X 1C7
