Security Designer: Cryptography & Secrets Management

ia; Quebec; Hybrid; CAD 90,000 - 135,000; Full time

Benefits offered by this job

Flexible benefits

Hybrid work environment

Employee share purchase plan

Vacation and wellness days

Telemedicine

Job summary

iA Financial Group in Canada is seeking a Security Designer to shape the design, evolution, and operation of secrets management, cryptographic keys, and privileged access solutions. You will help strengthen security posture and advance modern cryptography and IAM practices.

The role emphasizes collaboration, standards, and continuous improvement in security architectures across cloud and on-prem environments.

Qualifications

• Minimum 5 years in information security, with at least 2 years in cryptography.
• Hands-on experience implementing, configuring, or operating HSM solutions in cloud environments.
• Familiarity with security frameworks and standards (NIST, ISO 27001).

Responsibilities

• Design and evolve solutions for secrets management, cryptographic keys, certificates, and privileged accounts.
• Define integration patterns and support IT teams securely using Vault, Azure Key Vault, and PKI platforms.
• Contribute to cryptography initiatives including certificate lifecycle management and post-quantum readiness.
• Advance privileged access management by applying least privilege, separation of duties, and traceability.
• Collaborate with delivery, architecture, and project teams to embed security requirements and provide documentation.

Skills

Security architecture

Cryptography

IAM

HSM in cloud

NIST/ISO27001 knowledge

Education

Bachelor's degree in CS/Cybersecurity

Tools

HashiCorp Vault

Azure Key Vault

PKI

Job description

iA Financial Group in Canada is seeking a Security Designer to shape the design, evolution, and operation of secrets management, cryptographic keys, and privileged access solutions. You will help strengthen security posture and advance modern cryptography and IAM practices.

The role emphasizes collaboration, standards, and continuous improvement in security architectures across cloud and on-prem environments.