Senior Consultant, Cryptography

Location: Toronto (Hybrid – 4 days per week) | Practice Area: Banking & Payments | Type: Permanent Help financial institutions strengthen cryptographic protection, governance and resilience across complex technology environments. The Role As a Senior Consultant, Cryptography at Capco, you will help our financial services clients strengthen how they protect sensitive data across on-premises and cloud environments. You will bring practical knowledge of applied cryptography alongside experience identifying cryptographic and data security gaps at enterprise scale. Working with technology teams, asset owners and other stakeholders, you will help develop cryptographic requirements, monitor adherence, identify areas of non-compliance and support effective remediation. The role spans cryptographic governance, encryption, PKI, key lifecycle management and emerging areas such as post-quantum cryptography and cryptographic agility. What You’ll Do Develop and enhance cryptography frameworks, guiding principles, policies, procedures, standards and technical requirements. Identify cryptographic and data security gaps, assess their impact and work with asset owners and stakeholders to remediate areas of non-compliance. Support cryptographic protection of Data at Rest and Data in Transit across on-premises and public cloud environments. Provide guidance across encryption, PKI, key lifecycle management, TLS, digital certificates and database Transparent Data Encryption (TDE). Develop and execute remediation plans relating to audit findings and help strengthen cryptographic controls across complex enterprise environments. What We’re Looking For Strong experience with applied cryptography, cryptographic governance and enterprise data protection within complex technology environments. Knowledge of symmetric and asymmetric encryption, PKI, x509 digital certificates, SSH, TLS, TLS cipher suites and cryptographic key lifecycle management. Experience with encryption technologies across databases and cloud environments, including TDE and protection of sensitive data in public cloud. Ability to perform impact and stakeholder analysis, identify security gaps and translate technical findings into clear, practical remediation activities. Strong documentation, communication and presentation skills, with the ability to work effectively with technical teams, asset owners and other stakeholders. Bonus Points For Experience with Microsoft ADCS, Venafi or comparable enterprise certificate and key management technologies. Knowledge of database encryption across technologies such as MS SQL, Oracle, DB2 or MongoDB. Experience supporting audit findings, control assessments or remediation programmes within financial services. Knowledge of post-quantum cryptography and the implications of emerging cryptographic standards. Understanding of cryptographic agility and approaches for preparing enterprise environments for changes in…