Cryptography & Network Architect

Procom; Ottawa; On-site; CAD 120,000 - 160,000; Full time

Job summary

Procom is seeking a Manager, Cryptography and Network Security Architect to lead the cryptographic strategy across the enterprise in Ottawa. The role designs secure, scalable architectures, embedding security by design and guiding major initiatives and system transitions.

You will collaborate with Cybersecurity, Enterprise Architecture, Network, and Engineering teams, stay ahead of post-quantum developments, and ensure TLS, PKI, and key management practices are sound across cloud and on-premises

Qualifications

• 5 to 8 years of experience in information technology or cybersecurity.
• At least 3 years in cryptography.
• Proven experience as a Solution Architect or Security Architect in complex enterprise environments.
• Strong knowledge of cryptography concepts and protocols, including key management and PKI.
• Deep understanding of network architecture and security, including TLS, IPSec, and secure communications.

Responsibilities

• Designs and implements secure cryptographic architectures and protocols aligned with industry standards and best practices.
• Defines, governs, and maintains enterprise encryption, key management, and cryptographic standards, including evaluation of algorithms, platforms, and technologies.
• Architects secure network and application communications using TLS, IPSec, VPNs, secure APIs, zero trust principles, firewalls, and network segmentation across cloud, on-premises, and distributed environments.
• Serves as cryptography SME, guiding internal teams and external partners on cryptographic design, implementation, and integration.
• Performs architecture reviews, threat modelling, and security risk assessments to identify vulnerabilities and mitigations early in the lifecycle.
• Collaborates with Cybersecurity, Enterprise Architecture, Network, and Engineering teams to embed cryptographic requirements into designs and risk roadmaps.
• Guides development and infrastructure teams on secure implementation patterns and cryptographic best practices.
• Stays current with emerging cryptographic threats and post-quantum developments to future-proof solutions.

Skills

Cryptography concepts

Network security

Key management

PKI

Threat modelling

Zero trust

TLS/IPSec/VPNs

Cloud & on-prem

Software architecture

Education

Bachelor's degree in Computer Science/Cybersecurity/Mathematics

Master’s degree (asset)

Tools

HSMs

PKI tooling

Threat modelling tools

Job description

Scope The Manager, Cryptography and Network Security Architect enables the client’s cryptographic strategy, advances quantum-resilient security, and strengthens network security across the enterprise. With deep expertise in cryptography and network security, this role designs secure, scalable, and resilient solutions that protect systems, data, and communications. As a member of the Crypto Centre of Excellence, the Manager shapes end-to-end architectures, ensures security is embedded by design, and provides expert guidance on major initiatives and enterprise-wide system transitions. The role provides technical leadership across architecture, network, and security teams to ensure alignment with industry standards and best practices. Duties and Key ResponsibilitiesDesigns and implements secure cryptographic architectures and protocols aligned with industry standards and best practices for data protection, network security, and access control.Defines, governs, and maintains enterprise encryption, key management, and cryptographic standards, including the evaluation and selection of algorithms, platforms, and technologies.Applies expertise in cryptography to solution designs, including encryption at rest and in transit, PKI, digital certificates, HSMs, secure authentication mechanisms, and key lifecycle management.Architects secure network and application communications using TLS, IPSec, VPNs, secure APIs, zero trust principles, firewalls, and network segmentation across cloud, on-premises, and distributed environments.Serves as the organization’s cryptography subject matter expert, providing authoritative guidance to internal teams and external partners on cryptographic design, implementation, and integration.Performs architecture reviews, threat modelling, and security risk assessments to identify cryptographic and network vulnerabilities and recommend mitigations early in the solution lifecycle.Collaborates with Cybersecurity, Enterprise Architecture, Network, and Engineering teams to embed security and cryptographic requirements into solution designs and align with architectural roadmaps and risk strategies.Guides development and infrastructure teams on secure implementation patterns, cryptographic best practices, and network security configurations to ensure consistent and compliant deployments.Stays current with emerging cryptographic threats, standards, and advancements—including post-quantum cryptography—to continuously enhance architectural recommendations and future-proof solutions.Skills and Competencies Must Have:Completed post-secondary education in Computer Science, Cybersecurity, Mathematics or a related field.5 to 8 years of relevant experience in information technology, cybersecurity or other related fields.3 or more years of experience in cryptography.Proven experience as a Solution Architect, Security Architect, or similar role in complex enterprise environments.Strong, hands-on knowledge of cryptography concepts and technologies, including:Encryptin algorithms and protocols.Key management and PKI.Certificate lifecycle management.Secure identity and authenticatin mechanisms.Deep understanding of network architecture and security, including:TCP/IP, DNS, ruting, and segmentation.Secure cmmunications (TLS, IPSec, VPNs).Clud and hybrid network architectures.Experience designing solutions across cloud, on-premises, and distributed systems.Strong knowledge of cryptographic algorithms (e.g. AES, RSA, ECC, SHA-2/3, etc.).Solid understanding of cryptography, network protocols, security practices, software architecture, system architecture.Familiarity with network security architectures (i.e. firewalls, IDS/IPS, zero trust, segmentation).Deep understanding of secure system design, distributed systems, and threat modeling.Nice to Have:A graduate-level degree (such as a Master’s) is an asset.Certified Information Systems Security Professional (CISSP), CISM, CISA (ISACA) or equivalent is highly desirableThis posting is for an existing vacancy.This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.