Engineering | Level 2 (CAD) - RSR MSP

Lancesoft; Montreal; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Lancesoft seeks a Cybersecurity Engineer (Level 2) in Montreal to implement and manage cryptographic infrastructure securing sensitive data and transactions. The role focuses on cryptographic services, key management, and regulatory compliance within the Crypto team.

You will work onsite with 3 days/week presence from Day 1, contributing to secure systems and automations across enterprise applications.

Qualifications

• Understanding encryption key lifecycle management including generation, rotation, archival and destruction.
• Experience with cryptographic infrastructure and key management platforms.
• Automation experience using PowerShell or Python for ops efficiency.
• Ability to integrate cryptographic services with enterprise apps using KMIP and PKCS#11.
• Proficiency with Linux or Unix variants.
• Familiarity with Observability tools such as Prometheus and Grafana.
• Regulatory and risk controls related to cryptographic infrastructure.

Responsibilities

• Contribute to complex cryptographic projects and initiatives.
• Collaborate with teams and leadership on security topics.
• Build and maintain cryptographic infrastructure including HSMs and key management.
• Manage encryption key lifecycles per Firm standards.
• Integrate cryptographic services with enterprise apps using KMIP/PKCS#11.
• Coordinate with cybersecurity, risk, and compliance for controls.
• Troubleshoot cryptographic systems and vault issues.
• Maintain documentation and assist users via FAQs.
• Drive automation for certificate and key workflows.

Skills

Encryption lifecycle understanding

Cryptographic infrastructure

Automation scripting

KMIP PKCS#11 familiarity

Linux/Unix proficiency

Observability tools (Prometheus Grafa

Tools

CipherTrust Manager

Luna HSMs

Job description

Job Title: Cybersecurity Engineer Experience Level: Level 2 (intermediate): 2-5 years Location: Montreal (Day 1 onboarding onsite/in office presence 3x/week) We're seeking someone to join our Crypto team as Cybersecurity Engineer in Technology to implement and manage cryptographic infrastructure that secures the Firm's most sensitive data and transactions. In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cybersecurity Engineering position, which is part of the job family responsible for developing and maintaining secure systems, cryptographic services, and key management solutions to protect Firm assets and ensure compliance with regulatory standards. Since 1935, *** is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What you'll do in the role:

• Contribute to the function through complex project tasks and initiatives.
• Interact regularly with team members and occasionally leadership on a range of topics.
• Build and Maintain cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
• Manage encryption key lifecycle processes (generation, rotation, archival, destruction) aligned with Firm security standards.
• Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
• Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal control requirements.
• Troubleshoot and resolve complex issues related to cryptographic systems and vaults.
• Maintain documentation, assist customers through FAQ entries and similar.
• Drive automation and process improvements for certificate and key management workflows.

What you'll bring to the role:

• Understanding of encryption key lifecycle management, including generation, rotation, archival, and destruction.
• Experience in supporting cryptographic infrastructure and key management platforms such as CipherTrust Manager and Luna Hardware Security Modules.
• Experience in automation and scripting (e.g., PowerShell, Python) for operational efficiency.
• Ability to integrate cryptographic services with enterprise applications using protocols like KMIP and PKCS#11.
• Proficiency in Linux or other Unix variant.
• Experience/Knowledge with Observability tools such as Prometheus and Grafana.
• At least 2 years' relevant experience would generally be expected to find the skills required for this role.
• Understanding of regulatory requirements and risk controls related to cryptographic infrastructure.
• Ability to process information, translate into plans and present summaries to stakeholders.
• Experienced understanding of business line and discipline.