Senior Consultant, Cryptography

Capco; United States; Hybrid; USD 83,000 - 107,000; Full time

Benefits offered by this job

Competitive benefits

RRSP matching

Professional development

Job summary

Capco seeks a Senior Consultant, Cryptography to help financial institutions strengthen cryptographic protection across on-premises and cloud environments. You’ll develop cryptographic requirements, monitor adherence, and remediate gaps with stakeholders.

You will work across encryption, PKI, TLS, and key lifecycle management while addressing data protection in diverse tech ecosystems, including post-quantum considerations, in a hybrid Toronto setting.

Qualifications

• Experience with applied cryptography and data protection at enterprise scale.
• Knowledge of PKI, x509 certificates, SSH, TLS and key lifecycle management.
• Experience with encryption across databases and cloud environments.
• Strong communication and stakeholder engagement.

Responsibilities

• Develop and enforce cryptography frameworks, policies and standards.
• Identify data security gaps and work with owners to remediate.
• Protect Data at Rest and Data in Transit across on-premises and cloud.
• Provide guidance on encryption, PKI, TLS and TDE implementations.
• Lead remediation plans and strengthen cryptographic controls across complex environments.

Skills

Applied cryptography

Cryptographic governance

Data protection

PKI

TLS

Key lifecycle management

Post-quantum cryptography

Cryptographic agility

Stakeholder analysis

Documentation

Tools

Microsoft ADCS

Venafi

MS SQL

Job description

Location: Toronto (Hybrid – 4 days per week) | Practice Area: Banking & Payments | Type: Permanent

Help financial institutions strengthen cryptographic protection, governance and resilience across complex technology environments.

The Role

As a Senior Consultant, Cryptography at Capco, you will help our financial services clients strengthen how they protect sensitive data across on-premises and cloud environments.

You will bring practical knowledge of applied cryptography alongside experience identifying cryptographic and data security gaps at enterprise scale. Working with technology teams, asset owners and other stakeholders, you will help develop cryptographic requirements, monitor adherence, identify areas of non-compliance and support effective remediation.

The role spans cryptographic governance, encryption, PKI, key lifecycle management and emerging areas such as post-quantum cryptography and cryptographic agility.

What You’ll Do

• Develop and enhance cryptography frameworks, guiding principles, policies, procedures, standards and technical requirements.
• Identify cryptographic and data security gaps, assess their impact and work with asset owners and stakeholders to remediate areas of non-compliance.
• Support cryptographic protection of Data at Rest and Data in Transit across on-premises and public cloud environments.
• Provide guidance across encryption, PKI, key lifecycle management, TLS, digital certificates and database Transparent Data Encryption (TDE).
• Develop and execute remediation plans relating to audit findings and help strengthen cryptographic controls across complex enterprise environments.

What We’re Looking For

• Strong experience with applied cryptography, cryptographic governance and enterprise data protection within complex technology environments.
• Knowledge of symmetric and asymmetric encryption, PKI, x509 digital certificates, SSH, TLS, TLS cipher suites and cryptographic key lifecycle management.
• Experience with encryption technologies across databases and cloud environments, including TDE and protection of sensitive data in public cloud.
• Ability to perform impact and stakeholder analysis, identify security gaps and translate technical findings into clear, practical remediation activities.
• Strong documentation, communication and presentation skills, with the ability to work effectively with technical teams, asset owners and other stakeholders.

Bonus Points For

• Experience with Microsoft ADCS, Venafi or comparable enterprise certificate and key management technologies.
• Knowledge of database encryption across technologies such as MS SQL, Oracle, DB2 or MongoDB.
• Experience supporting audit findings, control assessments or remediation programmes within financial services.
• Knowledge of post-quantum cryptography and the implications of emerging cryptographic standards.
• Understanding of cryptographic agility and approaches for preparing enterprise environments for changes in cryptographic algorithms and standards.

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions.
• Work in a collaborative, flat, and entrepreneurial consulting culture.
• Access continuous learning, training, and industry certifications.
• Be part of a team shaping the future of digital financial services.
• Help shape the future of digital transformation across FS & Energy.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

Benefits

• Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
• Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution.
• Virtual Health Care & Support – Company-paid virtual health care and Employee & Family Assistance Program (EFAP) available to employees and their dependents/partners.
• Family & Wellness Support – Enhanced parental leave benefits from Day 1, a company-sponsored new parent gift, and fitness reimbursement to support health and well-being.
• Career Growth – A Business Coach from Day 1, providing personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job‑related knowledge, skills, experience and internal equity.
Canada Pay Transparency $118,000 — $152,000 CAD