Help secure the future of banking through enterprise-scale cryptographic innovation.
The RoleCapco is seeking an experienced Cryptography Engineer. This newly created role will sit within a Crypto Certification team, responsible for validating and certifying enterprise data protection solutions and new cryptographic use cases before enterprise adoption.
Working at the intersection of cloud, cybersecurity, and financial services, you will collaborate closely with Crypto Requirements, Security Architecture, and Crypto Engineering teams to design, test, validate, and document cryptographic solutions that protect critical banking and payments infrastructure. This role offers the opportunity to influence the future of enterprise encryption, certificate management, and post-quantum cryptography initiatives.
What You’ll DoAutomation Design and Development
- Design, develop, test, and deploy automated solutions and workflows for cryptographic services and operations, including:
- Certificate lifecycle management (issuance, renewal, revocation, and compliance monitoring).
- Symmetric and asymmetric key generation, distribution, rotation, escrow, and retirement.
- Integration with enterprise-approved key management and certificate management platforms.
Cryptographic Service Integration
- Develop APIs, automation frameworks, and reusable tools that enable seamless integration of cryptographic services (encryption, decryption, digital signing, verification, and key management) into enterprise applications, infrastructure platforms, and CI/CD pipelines.
Cryptographic Solution Certification
- Evaluate, validate, and certify cryptographic products, platforms, and integrations to ensure they meet enterprise security, risk, compliance, and operational requirements.
- Develop certification standards, test plans, and implementation guidance to support enterprise adoption of approved cryptographic solutions.
Tooling and Software Development
- Develop and maintain high-quality, secure, and maintainable code using languages such as Python, PowerShell, and Bash.
- Leverage modern automation and orchestration platforms to accelerate cryptographic service delivery and reduce operational risk.
Documentation and Standards
- Produce and maintain comprehensive technical documentation, including automation workflows, operational procedures, certification artifacts, and configuration standards.
- Contribute to enterprise cryptographic standards, best practices, and governance requirements.
- 7+ years of overall technology experience.
- 3+ years of experience in Security Engineering, DevSecOps, SRE, Infrastructure Engineering, or Software Engineering with a strong focus on automation and security.
- Proven experience designing and implementing automation solutions for certificate lifecycle management and cryptographic operations.
- Hands-on experience with enterprise certificate management platforms such as Venafi and key management platform such as CipherTrust Manager
- Strong proficiency in one or more scripting/programming languages, including Python, PowerShell, and Bash.
- Hands-on experience with automation and Infrastructure-as-Code tools such as Ansible, Terraform, Jenkins, GitHub Actions, or equivalent platforms.
- Strong understanding of cryptographic fundamentals, including:
- Symmetric and asymmetric encryption
- Key management and lifecycle management
- Public Key Infrastructure (PKI)
- TLS/SSL
- Digital signatures and hashing algorithms
- Experience supporting Linux and/or Windows server environments.
- Strong understanding of security controls, security architecture principles, and regulatory/compliance requirements.
- Excellent analytical, troubleshooting, and problem-solving skills.
- Strong verbal and written communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.
- Demonstrated ability to work effectively in a fast-paced environment while managing multiple priorities and competing deadlines.
- Deliver high-impact technology solutions for Tier 1 financial institutions.
- Work in a collaborative, flat, and entrepreneurial consulting culture.
- Access continuous learning, training, and industry certifications.
- Be part of a team shaping the future of digital financial services.
- Help shape the future of cybersecurity, cloud transformation, and cryptographic innovation across banking and payments.
Benefits
- Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
- Retirement Savings Program – RRSP with the option of receiving a matching employer contribution.
- Virtual Health Care and Employee & Family Assistance Program available for employees and eligible dependents.
- Enhanced parental leave top-up, new parent gift, and wellness reimbursement benefits.
- Business Coach from Day 1, providing personalized career guidance, development support, and growth opportunities.
Why This Role Is Open
We are currently hiring for this role due to a newly created vacancy within our organization. This position has been established to support growing business demand and expanding cryptographic security initiatives. We are actively seeking a qualified professional who can make an immediate impact and help strengthen enterprise data protection capabilities.
Inclusion at CapcoWe’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
Use of Artificial Intelligence in Talent AcquisitionAt Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.
AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.
Pay Transparency
The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.
Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.
Capco Toronto, Ontario, CAN Office
First Canadian Place, Suite 5010, 100 King Street West, Toronto, Ontario, Canada, M5X 1C7
