Manager, Cryptography

Manager, Cryptography & Network Security Architect
Location: Ottawa, Ontario – Hybrid
Term: 12-Month Contract + 12-Month Extension Option
Hours: 37.5 hours/week
Start Date: November 2026
IMPORTANT:
Enterprise experience is critical.
Candidates may be subject matter experts in a specific area, but must also understand the broader enterprise environment.
Must demonstrate a high level of technical knowledge and the ability to communicate effectively with product groups.
Encryption technology experience alone is not sufficient. Candidates must have a strong understanding of PKI infrastructure.
Looking for someone who can hit the ground running with minimal ramp-up time.
Must be able to explain complex technical concepts to executives, have executive-level exposure, and create and deliver presentations.
Rate is firm, with no flexibility.
Must be located in Ottawa.

We are seeking an experienced Manager, Cryptography & Network Security Architect to provide technical leadership across enterprise cryptography, network security, and secure solution architecture.
Cryptography is the primary focus of this role. The successful candidate will bring strong, hands‑on expertise in cryptographic technologies and architectures, including encryption, PKI, digital certificates, HSMs, key management, secure authentication, and cryptographic protocols.
This role will help shape enterprise cryptographic strategy, advance post‑quantum/quantum‑resilient security, and design secure, scalable solutions across cloud, on‑premises, hybrid, and distributed environments.
Key Responsibilities
Design and implement secure cryptographic architectures and protocols for enterprise systems, applications, networks, and data.
Define and govern enterprise encryption, key management, PKI, certificate management, and cryptographic standards.
Design solutions involving encryption at rest and in transit, PKI, digital certificates, HSMs, secure authentication, and key lifecycle management.
Architect secure network and application communications using TLS, IPSec, VPNs, secure APIs, Zero Trust, firewalls, and network segmentation.
Serve as a senior cryptography subject matter expert, providing technical guidance across security, architecture, infrastructure, and engineering teams.
Conduct architecture reviews, threat modelling, and security risk assessments to identify cryptographic and network vulnerabilities.
Establish secure implementation patterns and cryptographic best practices for development and infrastructure teams.
Evaluate emerging cryptographic technologies, standards, algorithms, and threats.
Support the organization's evolution toward post-quantum cryptography (PQC) and quantum‑resilient security architectures.
Collaborate with Cybersecurity, Enterprise Architecture, Network, Cloud, and Engineering teams to ensure security is embedded by design.

Required Experience
Post-secondary education in Computer Science, Cybersecurity, Mathematics, or a related discipline.
5–8+ years of relevant IT, cybersecurity, security architecture, or related experience.
3+ years of direct cryptography experience.
Proven experience as a Security Architect, Solution Architect, Cryptography Architect, or similar senior technical role within complex enterprise environments.
Strong hands‑on knowledge of:
Cryptographic algorithms and protocols
AES, RSA, ECC, SHA-2/SHA-3
Encryption and key management
PKI and digital certificates
Certificate lifecycle management
Hardware Security Modules (HSMs)
Secure identity and authentication
Strong understanding of TCP/IP, DNS, routing, network segmentation, TLS, IPSec, VPNs, firewalls, IDS/IPS, and Zero Trust architectures.
Experience designing secure solutions across cloud, hybrid, on-premises, and distributed environments.
Strong knowledge of secure system design, software/system architecture, distributed systems, network protocols, and threat modelling.
Ability to provide senior‑level technical leadership and communicate complex security concepts to both technical and business stakeholders.

Nice to Have
Master’s degree or other graduate‑level education.
CISSP, CISM, CISA, or equivalent security certification.
Experience with post-quantum cryptography, crypto-agility, quantum-resistant algorithms, or cryptographic modernization initiatives.