Cybersecurity Engineer

Astek; Montreal (administrative region); On-site; CAD 90,000 - 110,000; Full time

Job summary

Astek in Montreal is seeking a cryptographic infrastructure engineer to contribute to complex projects, interact with team and leadership, and support enterprise security.

You'll build and maintain HSMs, manage key lifecycles, integrate services with KMIP and PKCS#11, and collaborate with security teams.

Candidates should have 2+ years experience, Linux, Python/PowerShell, and observability tools like Prometheus and Grafana.

Qualifications

• Understanding of encryption key lifecycle management (generation, rotation, archival, destruction).
• Experience with cryptographic infrastructure and key management platforms (CipherTrust Manager, Luna HSM).
• Experience in automation and scripting (PowerShell, Python) for operational efficiency.
• Ability to integrate cryptographic services with enterprise apps using KMIP and PKCS#11.
• Proficiency in Linux/Unix.
• Experience with Observability tools like Prometheus and Grafana.
• At least 2 years of relevant experience expected.
• Understanding regulatory requirements and risk controls related to cryptographic infrastructure.
• Ability to translate information into plans and present summaries to stakeholders.
• Understanding of business lines and disciplines.

Responsibilities

• Contribute to complex project tasks and initiatives.
• Interact regularly with team members and leadership on a range of topics.
• Build and maintain cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
• Manage encryption key lifecycle processes (generation, rotation, archival, destruction) aligned with Firm security standards.
• Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
• Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal control requirements.
• Troubleshoot and resolve complex issues related to cryptographic systems and vaults.
• Maintain documentation, assist customers through FAQ entries and similar
• Drive automation and process improvements for certificate and key management workflows.

Skills

Key lifecycle

Automation scripting

PowerShell

Python

KMIP

PKCS#11

Linux

Grafana

Prometheus

Stakeholder comms

Tools

CipherTrust Manager

Luna HSM

Job description

• Contribute to the function through complex project tasks and initiatives.
• Interact regularly with team members and occasionally leadership on a range of topics
• Build and Maintain cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
• Manage encryption key lifecycle processes (generation, rotation, archival, destruction) aligned with Firm security standards.
• Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
• Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal control requirements.
• Troubleshoot and resolve complex issues related to cryptographic systems and vaults.
• Maintain documentation, assist customers through FAQ entries and similar
• Drive automation and process improvements for certificate and key management workflows.

What you’ll bring to the role:

• Understanding of encryption key lifecycle management, including generation, rotation, archival, and destruction.
• Experience in supporting cryptographic infrastructure and key management platforms such as CipherTrust Manager and Luna Hardware Security Modules.
• Experience in automation and scripting (e.g., PowerShell, Python) for operational efficiency.
• Ability to integrate cryptographic services with enterprise applications using protocols like KMIP and PKCS#11.
• Proficiency in Linux or other Unix variant
• Experience/Knowledge with Observability tools such as Prometheus and Grafana
• At least 2 years’ relevant experience would generally be expected to find the skills required for this role.
• Understanding of regulatory requirements and risk controls related to cryptographic infrastructure.
• Ability to process information, translate into plans and present summaries to stakeholders.
• Experienced understanding of business line and discipline.