Senior IAM & Secrets Management Analyst - Enterprise Cryptography, HSM, PKI & Key Management
Senior IAM & Secrets Management Analyst - Enterprise Cryptography, HSM, PKI & Key Management
Type: Permanent/FTE

Location: Etobicoke, Hybrid

Overview
The Senior Analyst, IAM & Secrets Management is responsible for supporting and advancing enterprise cryptographic security across payment, cloud and IAM environments.

This is a cryptography-first individual contributor role with primary responsibility across cryptographic key management, HSM infrastructure, PKI, certificate lifecycle management and secrets management. The successful candidate will work across engineering, architecture, compliance and audit teams to maintain secure cryptographic platforms and controls across cloud and on-premises environments.

Key Responsibilities
Cryptography & Key Management

Support and maintain enterprise cryptographic architecture across payment, cloud and IAM environments.

Manage the full cryptographic key lifecycle, including generation, distribution, storage, rotation, archival, revocation and destruction.

Maintain cryptographic standards, patterns, guardrails and operational procedures.

Support key ceremonies using dual-control and split-knowledge principles.

Perform cryptographic security design reviews and provide technical guidance to engineering and architecture teams.

HSM & CKMS

Integrate, administer and support enterprise Hardware Security Modules.

Support Cryptographic Key Management Systems and associated operational processes.

Develop or maintain utilities and workflows using HSM SDKs and APIs.

Support secure payment cryptography, including P2PE-related components.

Troubleshoot cryptographic platform, key-management and HSM issues.

Support deployment, configuration, upgrades and continuous improvement of cryptographic platforms.

PKI & Certificate Management

Support enterprise PKI platforms and governance.

Manage certificate issuance, renewal, revocation and lifecycle processes.

Support certificate lifecycle automation using Venafi or equivalent tooling.

Maintain certificate management procedures, controls and technical documentation.

Support platforms such as CyberArk ZTPKI or comparable enterprise PKI solutions.

Secrets Management

Support enterprise secrets-management platforms and processes.

Implement and maintain secure secret storage, rotation and distribution patterns.

Support platforms such as HashiCorp Vault and other enterprise secrets-management technologies.

Integrate secrets-management capabilities with applications, cloud platforms and CI/CD pipelines.

Support automated secrets-management and credential-management workflows.

Payment Security & Compliance

Ensure cryptographic controls align with PCI DSS, PCI PIN, PCI P2PE and PCI MPoC requirements.

Support audit evidence collection, regulatory assessments and control remediation.

Work with banks, card networks, technology partners and integrators where required.

Maintain technical specifications and documentation for payment-security components and integrations.

Technical Design & Integration

Gather technical requirements and translate them into cryptographic and security designs.

Review solution architecture and integration designs.

Support secure API integrations involving cryptographic or IAM capabilities.

Recommend technical patterns and support implementation and deployment activities.

Must-Have Requirements

7+ years of experience in cryptography, security engineering,



IAM or related enterprise security environments, with substantial hands‑on cryptography experience.

Strong hands‑on experience with HSMs and enterprise cryptographic key management .

Demonstrated experience managing the full cryptographic key lifecycle .

Strong experience with PKI and certificate lifecycle management .

Experience with key ceremonies, dual control and split knowledge .

Hands‑on experience with enterprise secrets‑management or KMS platforms , such as HashiCorp Vault.

Experience supporting or integrating cryptographic platforms through APIs, SDKs or automation workflows .

Understanding of IAM fundamentals including authentication, federation, SSO, privileged access and secrets management.

Experience working within regulated enterprise security environments.

Strong technical documentation experience for cryptographic procedures, controls and operational processes.

Nice‑to‑Have Requirements

Experience with Thales, Entrust, CyberArk ZTPKI, Venafi or comparable cryptographic platforms.

Experience with payment cryptography .

Knowledge of PCI DSS, PCI PIN, PCI P2PE and PCI MPoC .

Financial services, payments, telecom or other high‑volume transaction environment experience.

Experience integrating cryptographic controls into CI/CD and DevSecOps pipelines .

Cloud cryptography or IAM experience across Azure, AWS or GCP.

Experience working with banks, card networks or payment integrators.

CISSP, CCSP, PCI ISA or related security/cryptography certification.

Senior IAM & Secrets Management Analyst - Enterprise Cryptography, HSM, PKI & Key Management
Type: Permanent/FTE

Location: Etobicoke, Hybrid

Overview
The Senior Analyst, IAM & Secrets Management is responsible for supporting and advancing enterprise cryptographic security across payment, cloud and IAM environments.

This is a cryptography-first individual contributor role with primary responsibility across cryptographic key management, HSM infrastructure, PKI, certificate lifecycle management and secrets management. The successful candidate will work across engineering, architecture, compliance and audit teams to maintain secure cryptographic platforms and controls across cloud and on‑premises environments.

Key Responsibilities
Cryptography & Key Management

Support and maintain enterprise cryptographic architecture across payment, cloud and IAM environments.

Manage the full cryptographic key lifecycle, including generation, distribution, storage, rotation, archival, revocation and destruction.

Maintain cryptographic standards, patterns, guardrails and operational procedures.

Support key ceremonies using dual-control and split-knowledge principles.

Perform cryptographic security design reviews and provide technical guidance to engineering and architecture teams.

HSM & CKMS

Integrate, administer and support enterprise Hardware Security Modules.

Support Cryptographic Key Management Systems and associated operational processes.

Develop or maintain utilities and workflows using HSM SDKs and APIs.

Support secure payment cryptography, including P2PE-related components.





Troubleshoot cryptographic platform, key-management and HSM issues.

Support deployment, configuration, upgrades and continuous improvement of cryptographic platforms.

PKI & Certificate Management

Support enterprise PKI platforms and governance.

Manage certificate issuance, renewal, revocation and lifecycle processes.

Support certificate lifecycle automation using Venafi or equivalent tooling.

Maintain certificate management procedures, controls and technical documentation.

Support platforms such as CyberArk ZTPKI or comparable enterprise PKI solutions.

Secrets Management

Support enterprise secrets-management platforms and processes.

Implement and maintain secure secret storage, rotation and distribution patterns.

Support platforms such as HashiCorp Vault and other enterprise secrets-management technologies.

Integrate secrets-management capabilities with applications, cloud platforms and CI/CD pipelines.

Support automated secrets-management and credential-management workflows.

Payment Security & Compliance

Ensure cryptographic controls align with PCI DSS, PCI PIN, PCI P2PE and PCI MPoC requirements.

Support audit evidence collection, regulatory assessments and control remediation.

Work with banks, card networks, technology partners and integrators where required.

Maintain technical specifications and documentation for payment-security components and integrations.

Technical Design & Integration

Gather technical requirements and translate them into cryptographic and security designs.

Review solution architecture and integration designs.

Support secure API integrations involving cryptographic or IAM capabilities.

Recommend technical patterns and support implementation and deployment activities.

Must‑Have Requirements

7+ years of experience in cryptography, security engineering, IAM or related enterprise security environments, with substantial hands‑on cryptography experience.

Strong hands‑on experience with HSMs and enterprise cryptographic key management .

Demonstrated experience managing the full cryptographic key lifecycle .

Strong experience with PKI and certificate lifecycle management .

Experience with key ceremonies, dual control and split knowledge .

Hands‑on experience with enterprise secrets‑management or KMS platforms , such as HashiCorp Vault.

Experience supporting or integrating cryptographic platforms through APIs, SDKs or automation workflows .

Understanding of IAM fundamentals including authentication, federation, SSO, privileged access and secrets management.

Experience working within regulated enterprise security environments.

Robust technical documentation experience for cryptographic procedures, controls and operational processes.

Nice‑to‑Have Requirements

Experience with Thales, Entrust, CyberArk ZTPKI, Venafi or comparable cryptographic platforms.

Experience with payment cryptography .

Knowledge of PCI DSS, PCI PIN, PCI P2PE and PCI MPoC .

Financial services, payments, telecom or other high‑volume transaction environment experience.

Experience integrating cryptographic controls into CI/CD and DevSecOps pipelines .

Cloud cryptography or IAM experience across Azure, AWS or GCP.

Experience working with banks, card networks or payment integrators.

CISSP, CCSP, PCI ISA or related security/cryptography certification.

Disclaimer:

AI may be used in evaluating candidates.

This posting is for an existing vacancy.
#J-18808-Ljbffr

📌 Senior IAM & Secrets Management Analyst - Enterprise Cryptography, HSM, PKI & Key Management (Ontario)
🏢 S.I. Systems
📍 Ontario