Manager, Cryptography & Network Security Architect

Manager, Cryptography & Network Security Architect

Location: Ottawa, Ontario – Hybrid
Term: 12-Month Contract + 12-Month Extension Option
Hours: 37.5 hours/week
Start Date: November 2026

IMPORTANT:

• Enterprise experience is critical.
• Candidates may be subject matter experts in a specific area, but must also understand the broader enterprise environment.
• Must demonstrate a high level of technical knowledge and the ability to communicate effectively with product groups.
• Encryption technology experience alone is not sufficient. Candidates must have a strong understanding of PKI infrastructure.
• Looking for someone who can hit the ground running with minimal ramp-up time.
• Must be able to explain complex technical concepts to executives, have executive-level exposure, and create and deliver presentations.
• Rate is firm, with no flexibility.
• Must be located in Ottawa.

We are seeking an experienced Manager, Cryptography & Network Security Architect to provide technical leadership across enterprise cryptography, network security, and secure solution architecture.

Cryptography is the primary focus of this role. The successful candidate will bring strong, hands-on expertise in cryptographic technologies and architectures, including encryption, PKI, digital certificates, HSMs, key management, secure authentication, and cryptographic protocols.

This role will help shape enterprise cryptographic strategy, advance post-quantum/quantum-resilient security, and design secure, scalable solutions across cloud, on-premises, hybrid, and distributed environments.

Key Responsibilities

• Design and implement secure cryptographic architectures and protocols for enterprise systems, applications, networks, and data.
• Define and govern enterprise encryption, key management, PKI, certificate management, and cryptographic standards.
• Design solutions involving encryption at rest and in transit, PKI, digital certificates, HSMs, secure authentication, and key lifecycle management.
• Architect secure network and application communications using TLS, IPSec, VPNs, secure APIs, Zero Trust, firewalls, and network segmentation.
• Serve as a senior cryptography subject matter expert, providing technical guidance across security, architecture, infrastructure, and engineering teams.
• Conduct architecture reviews, threat modelling, and security risk assessments to identify cryptographic and network vulnerabilities.
• Establish secure implementation patterns and cryptographic best practices for development and infrastructure teams.
• Evaluate emerging cryptographic technologies, standards, algorithms, and threats.
• Support the organization's evolution toward post-quantum cryptography (PQC) and quantum-resilient security architectures.
• Collaborate with Cybersecurity, Enterprise Architecture, Network, Cloud, and Engineering teams to ensure security is embedded by design.

Required Experience

• Post-secondary education in Computer Science, Cybersecurity, Mathematics, or a related discipline.
• 5–8+ years of relevant IT, cybersecurity, security architecture, or related experience.
• 3+ years of direct cryptography experience.
• Proven experience as a Security Architect, Solution Architect, Cryptography Architect, or similar senior technical role within complex enterprise environments.
• Strong hands-on knowledge of:
  • Cryptographic algorithms and protocols
  • AES, RSA, ECC, SHA-2/SHA-3
  • Encryption and key management
  • PKI and digital certificates
  • Certificate lifecycle management
  • Hardware Security Modules (HSMs)
  • Secure identity and authentication
• Strong understanding of TCP/IP, DNS, routing, network segmentation, TLS, IPSec, VPNs, firewalls, IDS/IPS, and Zero Trust architectures.
• Experience designing secure solutions across cloud, hybrid, on-premises, and distributed environments.
• Strong knowledge of secure system design, software/system architecture, distributed systems, network protocols, and threat modelling.
• Ability to provide senior-level technical leadership and communicate complex security concepts to both technical and business stakeholders.

Nice to Have

• Master’s degree or other graduate-level education.
• CISSP, CISM, CISA, or equivalent security certification.
• Experience with post-quantum cryptography, crypto-agility, quantum-resistant algorithms, or cryptographic modernization initiatives.
• Experience operating within a large, complex enterprise or highly regulated environment.

Work Arrangement

This is a hybrid Ottawa-based engagement. The current expectation is approximately 3 days per week onsite, increasing to 4 days per week beginning February 2027.

Limited travel between Ottawa and Toronto may be required, approximately once per quarter.

The successful candidate must be eligible to complete the organization's required security screening following selection.