Manager Cryptography & Network Security Architect

Raise; Ottawa; Hybrid; CAD 140,000 - 190,000; Full time

Job summary

Raise is seeking a Manager Cryptography & Network Security Architect in Ottawa (Hybrid) for a 12‑month contract. Lead cryptographic architectures, PKI and key management, and secure network design across cloud and on‑prem environments.

You will collaborate with Cybersecurity and Architecture teams to embed security requirements, perform risk assessments, and stay ahead of post‑quantum threats with best practices.

Qualifications

• Completed post-secondary education in Computer Science, Cybersecurity, Mathematics or related field.
• 5–8 years in IT or cybersecurity, with 3+ years in cryptography.
• Experience as a Solution/ Security Architect in complex enterprise environments.

Responsibilities

• Design and implement secure cryptographic architectures and protocols.
• Govern encryption, key management, PKI, and cryptographic standards.
• Apply cryptography to encryption at rest and in transit, digital certificates and HSMs.
• Architect secure network communications using TLS, IPSec, VPNs, zero trust.
• Lead threat modelling, risk assessments, and security reviews across projects.

Skills

Cryptography concepts

PKI & Key Management

Network security

Threat modelling

TLS/IPSec/VPNs

Cloud & Hybrid

HSMs

Zero trust

Secure identity

Certificate lifecycle

Education

Post-secondary degree in CS/Cybersecurity/Math

Job description

Manager Cryptography & Network Security Architect

• Location: Ottawa, Ontario (Hybrid)
• Contract Length: 12 Months

We at Raise are hiring a Manager Cryptography & Network Security Architect for one of our top clients. After establishing themselves as an industry leader, they’re now expanding their team to meet rising demand.

Key Responsibilities

• Designs and implements secure cryptographic architectures and protocols aligned with industry standards and best practices for data protection, network security, and access control.
• Defines, governs, and maintains enterprise encryption, key management, and cryptographic standards, including the evaluation and selection of algorithms, platforms, and technologies.
• Applies expertise in cryptography to solution designs, including encryption at rest and in transit, PKI, digital certificates, HSMs, secure authentication mechanisms, and key lifecycle management.
• Architects secure network and application communications using TLS, IPSec, VPNs, secure APIs, zero trust principles, firewalls, and network segmentation across cloud, on-premises, and distributed environments.
• Serves as the organization’s cryptography subject matter expert, providing authoritative guidance to internal teams and external partners on cryptographic design, implementation, and integration.
• Performs architecture reviews, threat modelling, and security risk assessments to identify cryptographic and network vulnerabilities and recommend mitigations early in the solution lifecycle.
• Collaborates with Cybersecurity, Enterprise Architecture, Network, and Engineering teams to embed security and cryptographic requirements into solution designs and align with architectural roadmaps and risk strategies.
• Guides development and infrastructure teams on secure implementation patterns, cryptographic best practices, and network security configurations to ensure consistent and compliant deployments.
• Stays current with emerging cryptographic threats, standards, and advancements—including post-quantum cryptography—to continuously enhance architectural recommendations and future-proof solutions.

Must have Skills:

• Completed post-secondary education in Computer Science, Cybersecurity, Mathematics or a related field.
• 5 to 8 years of relevant experience in information technology, cybersecurity or other related fields.
• 3 or more years of experience in cryptography.
• Proven experience as a Solution Architect, Security Architect, or similar role in complex enterprise environments.
• Strong, hands-on knowledge of cryptography concepts and technologies, including:
• Encryption algorithms and protocols.
• Key management and PKI.
• Certificate lifecycle management.
• Secure identity and authentication mechanisms.
• Deep understanding of network architecture and security, including:
• TCP/IP, DNS, routing, and segmentation.
• Secure communications (TLS, IPSec, VPNs).
• Cloud and hybrid network architectures.
• Experience designing solutions across cloud, on-premises, and distributed systems.
• Strong knowledge of cryptographic algorithms (e.g. AES, RSA, ECC, SHA-2/3, etc.).
• Solid understanding of cryptography, network protocols, security practices, software architecture, system architecture.
• Familiarity with network security architectures (i.e. firewalls, IDS/IPS, zero trust, segmentation).
• Deep understanding of secure system design, distributed systems, and threat modeling.

Nice to have Skills:

• A graduate-level degree (such as a Master’s) is an asset.
• Certified Information Systems Security Professional (CISSP), CISM, CISA (ISACA) or equivalent is highly desirable.
• Interviews
• Two interviews are anticipated: one standard interview and one technical interview.
• Interviews are approximately 1 hour.
• Interview panel will include the Director, GM/Head of Security, and an additional member of the Security team.
• There is a possibility that one or both interviews may be conducted in person.

Looking for meaningful work? We can help!

Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity.

We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/

In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or another job posting by Raise (or have any other questions), please contact us at [phone] or [e-mail]

#EAOP24