Job Description Cybersecurity Analyst / Cryptography Analyst Looking for an opportunity to work on meaningful projects and cutting-edge technologies? Join a high-performing team in the insurance sector for our client and contribute to initiatives that strengthen security, support digital transformation, and drive operational excellence in a fast-paced and collaborative environment.

What is in it for you: Salaried: $45-55 per hour.

Incorporated Business Rate: $52-62 per hour. 12-month contract with the potential for permanent employment.

Full-time position: 37.50 hours per week.

Occasional overtime may be required to support project requirements.

Hybrid model: 3 days per week on-site, subject to change.

Responsibilities: Vault & Secrets Management Provide operational support for Hashi

Corp Vault-based secrets and key management.

Administer and support Hashi

Corp Vault environments across production and non-production environments.

Manage the lifecycle of secrets, keys, tokens, leases, and service accounts.

Maintain authentication mechanisms, role-based access control, and access control lists aligned with least privilege principles.

Perform tenant onboarding and offboarding activities.

Troubleshoot and optimize Vault performance.

Support integrations with AWS KMS and external secret platforms.

Manage Vault upgrades, testing, and currency roadmaps.

Cryptography & HSM Operations Support HSM-integrated root of trust operations.

Support Vault-HSM integration, including Thales LUNA HSM environments.

Manage auto-unseal functionality, key rotation activities, and secure key handling practices.

Coordinate firmware upgrades and disaster recovery processes.

Support post-quantum cryptography readiness, assessments, transition strategies, risk identification, and mitigation.

Maintain inventories of cryptographic keys, secrets, certificates, and algorithms.

Identify deprecated or weak cryptographic implementations.

Certificate & PKI Management Manage TLS/SSL certificate lifecycle activities, including creation, renewal, revocation, replacement, installation validation,



and incident troubleshooting.

Ensure certificate lifecycle service level agreement adherence.

Maintain certificate inventory and ownership records.

Support PKI documentation, compliance activities, audits, and governance requirements.

Design, implement, and operate certificate lifecycle automation solutions.

Implement automation using ACME protocols, Vault PKI engine, Kubernetes cert-manager, and cloud-native tools.

Maintain certificate inventory, automation status records, and monitoring systems for renewal failures and expiry risks.

Enforce certificate standards, security best practices, least privilege principles, and segregation of duties.

Monitoring, Compliance & Security Perform cryptographic monitoring, reporting, governance, and risk management activities.

Conduct proactive monitoring and health checks.

Deliver KPIs and service metrics related to Vault operations, PKI, certificate automation, cryptographic risks, and post-quantum cryptography readiness.

Utilize monitoring and reporting tools, including Dynatrace, Site

Scope, Rapid7, Power BI, and Microsoft Excel.

Support audits, compliance reviews, and risk assessments.

Ensure compliance with security and regulatory requirements.

Support backup, disaster recovery, security investigations, and audit activities.

Maintain the availability and resilience of cryptographic services.

Participate in information security incident handling, incident response activities, and alert triage.

Identify and address network security gaps.

Operational Support & Continuous Improvement Support configuration changes and change management processes.

Coordinate off-hours support activities.





Develop and maintain documentation and operational runbooks.

Facilitate knowledge sharing across teams.

Drive continuous improvement and operational maturity initiatives.

What you will need to succeed: Required qualifications Experience 1-3 years of experience.

Experience administering and supporting Hashi

Corp Vault environments.

Experience with compliance and audit frameworks.

Experience operating in a 24/7 business-as-usual setting.

Technical and professional skills Ticket management skills.

Cryptography knowledge and experience.

Hashi

Corp Vault administration and operations.

Information security incident handling.

Hardware Security Modules knowledge and experience. TLS/SSL certificate management.

Public Key Infrastructure (PKI) knowledge and experience.

Secrets management platform experience, including Hashi

Corp Vault.

Cloud platform experience.

Automation experience, including APIs, scripting, and CI/CD integrations.

Experience with monitoring and reporting tools.

Strong understanding of cryptographic principles and lifecycle management.

Knowledge of RBAC, least privilege principles, and access control.

Problem-solving and troubleshooting skills.

Preferred qualifications Experience Experience in regulated industries such as insurance or financial services.

Technical and professional skills Experience with Thales LUNA HSM.

Experience with AWS cloud platforms.

Experience with Kubernetes and cert-manager.

Exposure to Post-Quantum Cryptography (PQC).

Soft skills Resourceful.

Forward-thinking.

Problem-solving.

Ability to enable knowledge sharing across teams.

Ability to drive continuous improvement and operational maturity initiatives.

Why Recruit Action? Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach.

As part of the screening process, some applications may be reviewed using artificial intelligence tools.

Only candidates who meet the hiring criteria will be contacted.

Requirements

📌 Cybersecurity Analyst / Cryptography Analyst (Markham)
🏢 Recrute Action
📍 Markham