Senior Consultant, Cryptography
Canada - Toronto · CAD 118,000-152,000 · Hybrid · Posted Sep 30, 2026
At a glance
- Workplace
- Hybrid
- Location
- Canada - Toronto
- Salary
- CAD 118,000-152,000 · Base salary
About the role
- As a Senior Consultant, Cryptography at Capco, you will help our financial services clients strengthen how they protect sensitive data across on-premises and cloud environments.
- The role spans cryptographic governance, encryption, PKI, key lifecycle management and emerging areas such as post-quantum cryptography and cryptographic agility.
Responsibilities
- Develop and enhance cryptography frameworks, guiding principles, policies, procedures, standards and technical requirements.
- Identify cryptographic and data security gaps, assess their impact and work with asset owners and stakeholders to remediate areas of non-compliance.
- Support cryptographic protection of Data at Rest and Data in Transit across on-premises and public cloud environments.
- Provide guidance across encryption, PKI, key lifecycle management, TLS, digital certificates and database Transparent Data Encryption (TDE).
- Develop and execute remediation plans relating to audit findings and help strengthen cryptographic controls across complex enterprise environments.
Requirements
- Strong experience with applied cryptography, cryptographic governance and enterprise data protection within complex technology environments.
- Knowledge of symmetric and asymmetric encryption, PKI, x509 digital certificates, SSH, TLS, TLS cipher suites and cryptographic key lifecycle management.
- Experience with encryption technologies across databases and cloud environments, including TDE and protection of sensitive data in public cloud.
- Ability to perform impact and stakeholder analysis, identify security gaps and translate technical findings into clear, practical remediation activities.
- Strong documentation, communication and presentation skills, with the ability to work effectively with technical teams, asset owners and other stakeholders.
Preferred qualifications
- Experience with Microsoft ADCS, Venafi or comparable enterprise certificate and key management technologies.
- Knowledge of database encryption across technologies such as MS SQL, Oracle, DB2 or MongoDB.
- Experience supporting audit findings, control assessments or remediation programmes within financial services.
- Knowledge of post-quantum cryptography and the implications of emerging cryptographic standards.
- Understanding of cryptographic agility and approaches for preparing enterprise environments for changes in cryptographic algorithms and standards.
Benefits
- Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
- Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution.
- Virtual Health Care & Support – Company-paid virtual health care and Employee & Family Assistance Program (EFAP) available to employees and their dependents/partners.
- Family & Wellness Support – Enhanced parental leave benefits from Day 1, a company-sponsored new parent gift, and fitness reimbursement to support health and well-being.
Workplace
- Hybrid – 4 days per week
Skills
- PKI
- SSH
- TLS
- Microsoft ADCS
- Venafi
- MS SQL
- Oracle
- DB2
- MongoDB
- Transparent Data Encryption