Senior Consultant, Cryptography

Capco; Toronto; Hybrid; CAD 118,000 - 152,000; Full time

Benefits offered by this job

Benefits coverage (comprehensive)

RRSP matching

Virtual health care

Parental leave

Career coaching

Job summary

Capco in Toronto is seeking a Senior Consultant, Cryptography to help financial services clients strengthen data protection across on-premises and cloud environments.

You will apply cryptography governance, manage PKI and key lifecycles, and address gaps at enterprise scale while collaborating with technology teams and stakeholders.

The role covers encryption, TLS, post-quantum topics, and remediation planning, with a focus on practical, auditable security outcomes.

Qualifications

• Experience with applied cryptography and data protection in large technology environments.
• Knowledge of symmetric/asymmetric encryption, PKI, X.509, TLS and certificate management.
• Experience encrypting data at rest/in transit across on-premises and cloud.
• Ability to translate findings into practical remediation actions for stakeholders.
• Strong documentation and communication skills with technical teams.

Responsibilities

• Develop cryptography frameworks, policies, standards and requirements.
• Identify gaps and coordinate remediation with asset owners and stakeholders.
• Support data protection across on-premises and cloud environments.
• Provide guidance on encryption, PKI, TLS, key lifecycle and TDE.
• Plan remediation for audit findings and strengthen cryptographic controls.

Skills

Applied cryptography

Cryptographic governance

Data protection

PKI

TLS

Key lifecycle

Post-quantum crypto

Cloud security

Tools

Venafi

Job description

Location: Toronto - 4 days per week | Practice Area: Banking & Payments | Type: Permanent

The Role

As a Senior Consultant, Cryptography at Capco, you will help our financial services clients strengthen how they protect sensitive data across on-premises and cloud environments.

You will bring practical knowledge of applied cryptography alongside experience identifying cryptographic and data security gaps at enterprise scale. Working with technology teams, asset owners and other stakeholders, you will help develop cryptographic requirements, monitor adherence, identify areas of non-compliance and support effective remediation.

The role spans cryptographic governance, encryption, PKI, key lifecycle management and emerging areas such as post-quantum cryptography and cryptographic agility.

What You’ll Do

Develop and enhance cryptography frameworks, guiding principles, policies, procedures, standards and technical requirements.

Identify cryptographic and data security gaps, assess their impact and work with asset owners and stakeholders to remediate areas of non-compliance.

Support cryptographic protection of Data at Rest and Data in Transit across on-premises and public cloud environments.

Provide guidance across encryption, PKI, key lifecycle management, TLS, digital certificates and database Transparent Data Encryption (TDE).

Develop and execute remediation plans relating to audit findings and help strengthen cryptographic controls across complex enterprise environments.

What We’re Looking For

Strong experience with applied cryptography, cryptographic governance and enterprise data protection within complex technology environments.

Knowledge of symmetric and asymmetric encryption, PKI, x509 digital certificates, SSH, TLS, TLS cipher suites and cryptographic key lifecycle management.

Experience with encryption technologies across databases and cloud environments, including TDE and protection of sensitive data in public cloud.

Ability to perform impact and stakeholder analysis, identify security gaps and translate technical findings into clear, practical remediation activities.

Strong documentation, communication and presentation skills, with the ability to work effectively with technical teams, asset owners and other stakeholders.

Bonus Points For

Experience with Microsoft ADCS, Venafi or comparable enterprise certificate and key management technologies.

Knowledge of database encryption across technologies such as MS SQL, Oracle, DB2 or MongoDB.

Experience supporting audit findings, control assessments or remediation programmes within financial services.

Knowledge of post-quantum cryptography and the implications of emerging cryptographic standards.

Understanding of cryptographic agility and approaches for preparing enterprise environments for changes in cryptographic algorithms and standards.

Why Join Capco

Deliver high-impact technology solutions for Tier 1 financial institutions.

Work in a collaborative, flat, and entrepreneurial consulting culture.

Access continuous learning, training, and industry certifications.

Be part of a team shaping the future of digital financial services.

Help shape the future of digital transformation across FS & Energy.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

Comprehensive Benefits Coverage - 100% company-paid health, life, and disability insurance effective from Day 1 of employment.

Retirement Savings Program - Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution.

Virtual Health Care & Support - Company-paid virtual health care and Employee & Family Assistance Program (EFAP) available to employees and their dependents/partners.

Family & Wellness Support - Enhanced parental leave benefits from Day 1, a company-sponsored new parent gift, and fitness reimbursement to support health and well-being.

Career Growth - A Business Coach from Day 1, providing personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.

$118,000 - $152,000 CAD