Cyber Security Engineer

Open Systems Technologies; Montreal (administrative region); On-site; CAD 90,000 - 130,000; Full time

Job summary

Open Systems Technologies in Montreal, Canada seeks a cryptographic infrastructure specialist to manage key lifecycles, deploy HSMs, and integrate crypto services with enterprise apps using KMIP and PKCS#11.

You will work with cybersecurity, risk, and compliance teams to ensure controls, troubleshoot vault issues, and automate key-management workflows while documenting processes for internal use.

Qualifications

• 2+ years in cryptographic infrastructure and key management.
• Experience withCipherTrust Manager and Luna HSMs.
• Automation/scripting with PowerShell or Python.
• Ability to integrate cryptographic services via KMIP and PKCS#11.
• Proficient in Linux/Unix environments.
• Familiar with Observability tools like Prometheus and Grafana.
• Understanding of regulatory requirements and risk controls.
• Ability to translate information into plans and present to stakeholders.

Responsibilities

• Contribute to complex cryptography projects and initiatives.
• Interact with team members and leadership on a range of topics.
• Build and maintain cryptographic infrastructure, including HSMs.
• Manage encryption key lifecycle: generation, rotation, archival, destruction.
• Integrate cryptographic services with enterprise apps using KMIP and PKCS#11.
• Collaborate with cybersecurity, risk, and compliance teams on controls.
• Troubleshoot cryptographic systems and vault issues.
• Maintain documentation and assist customers via FAQs.
• Drive automation and process improvements for key management workflows.

Skills

Key lifecycle management

Automation scripting

KMIP

PKCS#11

Linux/Unix

Observability tools

Regulatory/compliance awareness

Stakeholder communication

Tools

CipherTrust Manager

Luna HSMs

PowerShell

Python

Prometheus

Grafana

Job description

• Contribute to the function through complex project tasks and initiatives.
• Interact regularly with team members and occasionally leadership on a range of topics
• Build and Maintain cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
• Manage encryption key lifecycle processes (generation, rotation, archival, destruction) aligned with Firm security standards.
• Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
• Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal control requirements.
• Troubleshoot and resolve complex issues related to cryptographic systems and vaults.
• Maintain documentation, assist customers through FAQ entries and similar
• Drive automation and process improvements for certificate and key management workflows.

What you’ll bring to the role:

• Understanding of encryption key lifecycle management, including generation, rotation, archival, and destruction.
• Experience in supporting cryptographic infrastructure and key management platforms such as CipherTrust Manager and Luna Hardware Security Modules.
• Experience in automation and scripting (e.g., PowerShell, Python) for operational efficiency.
• Ability to integrate cryptographic services with enterprise applications using protocols like KMIP and PKCS#11.
• Proficiency in Linux or other Unix variant
• Experience/Knowledge with Observability tools such as Prometheus and Grafana
• At least 2 years’ relevant experience would generally be expected to find the skills required for this role.
• Understanding of regulatory requirements and risk controls related to cryptographic infrastructure.
• Ability to process information, translate into plans and present summaries to stakeholders.
• Experienced understanding of business line and discipline.