Senior Consultant, Cryptography

About the role

Capco is hiring a Senior Consultant, Cryptography in Toronto (hybrid, 4 days per week) within its Banking & Payments practice. You will help financial institutions strengthen cryptographic protection, governance and resilience across on-premises and cloud environments, working with technology teams, asset owners and other stakeholders.

Key responsibilities

• Develop and enhance cryptography frameworks, guidelines, policies, procedures, standards and technical requirements.
• Identify cryptographic and data security gaps, assess their impact and work with asset owners to remediate non-compliance.
• Support cryptographic protection of data at rest and in transit across on-premises and public cloud environments.
• Provide guidance on encryption, PKI, key lifecycle management, TLS, digital certificates and database Transparent Data Encryption (TDE).
• Develop and run remediation plans for audit findings and strengthen cryptographic controls in complex enterprise environments.

Required profile

• Strong experience with applied cryptography, cryptographic governance and enterprise data protection in complex technology environments.
• Ability to perform impact and stakeholder analysis, identify security gaps and turn technical findings into practical remediation.
• Strong documentation, communication and presentation skills, working with technical teams and asset owners.

Required skills

• Symmetric and asymmetric encryption, PKI, x509 certificates, SSH, TLS and cipher suites, and key lifecycle management.
• Encryption technologies in databases and cloud, including TDE.
• Bonus points: Microsoft ADCS, Venafi or similar certificate and key management tools; database encryption (MS SQL, Oracle, DB2, MongoDB); audit support and remediation experience in financial services; post-quantum cryptography and cryptographic agility.

What we offer

• Salary range of $118,000-$152,000 CAD, with possible annual discretionary bonus.
• Company-paid health, life and disability insurance from day 1.
• Registered RRSP with possible employer match, virtual health care and EFAP.
• Enhanced parental leave, new parent gift and fitness reimbursement.
• Business coach from day 1 and access to training and certifications.