Cryptography & Network Architect

Job Description

Scope The Manager, Cryptography and Network Security Architect enables the client’s cryptographic strategy, advances quantum-resilient security, and strengthens network security across the enterprise. With deep expertise in cryptography and network security, this role designs secure, scalable, and resilient solutions that protect systems, data, and communications. As a member of the Crypto Centre of Excellence, the Manager shapes end-to-end architectures, ensures security is embedded by design, and provides expert guidance on major initiatives and enterprise-wide system transitions. The role provides technical leadership across architecture, network, and security teams to ensure alignment with industry standards and best practices.
  Duties and Key Responsibilities

• Designs and implements secure cryptographic architectures and protocols aligned with industry standards and best practices for data protection, network security, and access control.
• Defines, governs, and maintains enterprise encryption, key management, and cryptographic standards, including the evaluation and selection of algorithms, platforms, and technologies.
• Applies expertise in cryptography to solution designs, including encryption at rest and in transit, PKI, digital certificates, HSMs, secure authentication mechanisms, and key lifecycle management.
• Architects secure network and application communications using TLS, IPSec, VPNs, secure APIs, zero trust principles, firewalls, and network segmentation across cloud, on-premises, and distributed environments.
• Serves as the organization’s cryptography subject matter expert, providing authoritative guidance to internal teams and external partners on cryptographic design, implementation, and integration.
• Performs architecture reviews, threat modelling, and security risk assessments to identify cryptographic and network vulnerabilities and recommend mitigations early in the solution lifecycle.
• Collaborates with Cybersecurity, Enterprise Architecture, Network, and Engineering teams to embed security and cryptographic requirements into solution designs and align with architectural roadmaps and risk strategies.
• Guides development and infrastructure teams on secure implementation patterns, cryptographic best practices, and network security configurations to ensure consistent and compliant deployments.
• Stays current with emerging cryptographic threats, standards, and advancements—including post-quantum cryptography—to continuously enhance architectural recommendations and future-proof solutions.

Skills and Competencies Must Have:

• Completed post-secondary education in Computer Science, Cybersecurity, Mathematics or a related field.
• 5 to 8 years of relevant experience in information technology, cybersecurity or other related fields.
• 3 or more years of experience in cryptography.
• Proven experience as a Solution Architect, Security Architect, or similar role in complex enterprise environments.
• Strong, hands-on knowledge of cryptography concepts and technologies, including:

• Encryptin algorithms and protocols.
• Key management and PKI.
• Certificate lifecycle management.
• Secure identity and authenticatin mechanisms.

• Deep understanding of network architecture and security, including:

• TCP/IP, DNS, ruting, and segmentation.
• Secure cmmunications (TLS, IPSec, VPNs).
• Clud and hybrid network architectures.

• Experience designing solutions across cloud, on-premises, and distributed systems.
• Strong knowledge of cryptographic algorithms (e.g. AES, RSA, ECC, SHA-2/3, etc.).
• Solid understanding of cryptography, network protocols, security practices, software architecture, system architecture.
• Familiarity with network security architectures (i.e. firewalls, IDS/IPS, zero trust, segmentation).
• Deep understanding of secure system design, distributed systems, and threat modeling.

Nice to Have:

• A graduate-level degree (such as a Master’s) is an asset.
• Certified Information Systems Security Professional (CISSP), CISM, CISA (ISACA) or equivalent is highly desirable

 

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.