Security Infrastructure Lead: PKI & Crypto Expert

Canada Life Group; Toronto; On-site; CAD 120,000 - 170,000; Full time

Benefits offered by this job

Education reimbursement

Health benefits

Mental health benefit

Volunteer day

Pension plan

Share ownership

Job summary

Canada Life is seeking a Lead Specialist to assess, design, and support security services across Windows, Linux and cloud environments. You will drive operational excellence, ensure change control and foster clear technical communication to deliver high-quality security outcomes.

The role requires hands-on PKI, HSM, cryptographic knowledge and experience with SIEM tooling; familiarity with phishing protection and cloud-native security is a plus. This is a full-time on-site position in Canada.

Qualifications

• Degree in Computer Science, Engineering, Cybersecurity, or related field.
• 5+ years supporting enterprise security, infrastructure, or cryptographic services.
• Deep understanding of cryptographic standards and PKI-related practices.
• Hands-on PKI/CA management, CLM, BYOK, HSM, and key management.
• Experience with Windows, Linux, or AIX, plus networking and cloud.
• Familiarity with SIEM and enterprise logging (Splunk/CRIBL) and phishing protection.
• Strong communication and problem-solving skills.

Responsibilities

• Assess, design and support offered security services with business value.
• Ensure operational excellence and align with ITIL incident/change management.
• Document processes clearly and advocate world-class service.
• Collaborate across teams to improve squad and department methods.

Skills

PKI

HSM

Cryptographic principles

Networking & cloud security

SIEM

Email phishing protection

Automation scripting

Education

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

Splunk

CRIBL

Proofpoint

O365

KnowBe4

Jira

Confluence

Job description

Canada Life is seeking a Lead Specialist to assess, design, and support security services across Windows, Linux and cloud environments. You will drive operational excellence, ensure change control and foster clear technical communication to deliver high-quality security outcomes.

The role requires hands-on PKI, HSM, cryptographic knowledge and experience with SIEM tooling; familiarity with phishing protection and cloud-native security is a plus. This is a full-time on-site position in Canada.