Cybersecurity Engineer

Summary

• Duration: 12 Months contract position
• Work Mode: Onsite
• Location: Montreal (Day 1 onboarding onsite/in office presence 3x/week)

Responsibilities

• Contribute to the function through complex project tasks and initiatives.
• Interact regularly with team members and occasionally leadership on a range of topics.
• Build and maintain cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
• Manage encryption key lifecycle processes (generation, rotation, archival, destruction) aligned with company security standards.
• Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
• Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal control requirements.
• Troubleshoot and resolve complex issues related to cryptographic systems and vaults.
• Maintain documentation, assist customers through FAQ entries and similar.
• Drive automation and process improvements for certificate and key management workflows.

Requirements

• Understanding of encryption key lifecycle management, including generation, rotation, archival, and destruction.
• Experience in supporting cryptographic infrastructure and key management platforms such as CipherTrust Manager and Luna Hardware Security Modules.
• Experience in automation and scripting (e.g., PowerShell, Python) for operational efficiency.
• Ability to integrate cryptographic services with enterprise applications using protocols like KMIP and PKCS#11.
• Proficiency in Linux or other Unix variant.
• Experience/Knowledge with observability tools such as Prometheus and Grafana.
• Minimum 2 years’ relevant experience required.
• Understanding of regulatory requirements and risk controls related to cryptographic infrastructure.
• Ability to process information, translate into plans and present summaries to stakeholders.
• Experienced understanding of business line and discipline.

This role is for an existing vacancy.