What you’ll do in the role:

- Contribute to the function through complex project tasks and initiatives.
- Interact regularly with team members and occasionally leadership on a range of topics
- Build and Maintain cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
- Manage encryption key lifecycle processes (generation, rotation, archival, destruction) aligned with Firm security standards.
- Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
- Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal control requirements.
- Troubleshoot and resolve complex issues related to cryptographic systems and vaults.
- Maintain documentation, assist customers through FAQ entries and similar
- Drive automation and process improvements for certificate and key management workflows.

What you’ll bring to the role:

- Understanding of encryption key lifecycle management, including generation, rotation, archival,



and destruction.
- Experience in supporting cryptographic infrastructure and key management platforms such as CipherTrust Manager and Luna Hardware Security Modules.
- Experience in automation and scripting (e.g., PowerShell, Python) for operational efficiency.
- Ability to integrate cryptographic services with enterprise applications using protocols like KMIP and PKCS#11.
- Proficiency in Linux or other Unix variant
- Experience/Knowledge with Observability tools such as Prometheus and Grafana
- At least 2 years’ relevant experience would generally be expected to find the skills required for this role.
- Understanding of regulatory requirements and risk controls related to cryptographic infrastructure.
- Ability to process information, translate into plans and present summaries to stakeholders.
- Experienced understanding of business line and discipline.

📌 Cybersecurity Engineer (Montreal)
🏢 Astek
📍 Montreal