Help secure the future of banking through enterprise-scale cryptographic innovation.
The RoleCapco is seeking an experienced Cryptography Engineer. This newly created role will sit within a Crypto Certification team, responsible for validating and certifying enterprise data protection solutions and new cryptographic use cases before enterprise adoption.
Working at the intersection of cloud, cybersecurity, and financial services, you will collaborate closely with Crypto Requirements, Security Architecture, and Crypto Engineering teams to design, test, validate, and document cryptographic solutions that protect critical banking and payments infrastructure. This role offers the opportunity to influence the future of enterprise encryption, certificate management, and post-quantum cryptography initiatives.
What You’ll DoAutomation Design and Development
- Design, develop, test, and deploy automated solutions and workflows for cryptographic services and operations, including:
- Certificate lifecycle management (issuance, renewal, revocation, and compliance monitoring).
- Symmetric and asymmetric key generation, distribution, rotation, escrow, and retirement.
- Integration with enterprise-approved key management and certificate management platforms.
Cryptographic Service Integration
- Develop APIs, automation frameworks, and reusable tools that enable seamless integration of cryptographic services (encryption, decryption, digital signing, verification, and key management) into enterprise applications, infrastructure platforms, and CI/CD pipelines.
Cryptographic Solution Certification
- Evaluate, validate, and certify cryptographic products, platforms, and integrations to ensure they meet enterprise security, risk, compliance, and operational requirements.
- Develop certification standards, test plans, and implementation guidance to support enterprise adoption of approved cryptographic solutions.
Tooling and Software Development
- Develop and maintain high-quality, secure, and maintainable code using languages such as Python, PowerShell, and Bash.
- Leverage modern automation and orchestration platforms to accelerate cryptographic service delivery and reduce operational risk.
Documentation and Standards
- Produce and maintain comprehensive technical documentation, including automation workflows, operational procedures, certification artifacts, and configuration standards.
- Contribute to enterprise cryptographic standards, best practices, and governance requirements.
- 7+ years of overall technology experience.
- 3+ years of experience in Security Engineering, DevSecOps, SRE, Infrastructure Engineering, or Software Engineering with a strong focus on automation and security.
- Proven experience designing and implementing automation solutions for certificate lifecycle management and cryptographic operations.
- Hands-on experience with enterprise certificate management platforms such as Venafi and key management platform such as CipherTrust Manager
- Strong proficiency in one or more scripting/programming languages, including Python, PowerShell, and Bash.
- Hands-on experience with automation and Infrastructure-as-Code tools such as Ansible, Terraform, Jenkins, GitHub Actions, or equivalent platforms.
- Strong understanding of cryptographic fundamentals, including:
- Symmetric and asymmetric encryption
- Key management and lifecycle management
- Public Key Infrastructure (PKI)
- TLS/SSL
- Digital signatures and hashing algorithms
- Experience supporting Linux and/or Windows server environments.
- Strong understanding of security controls, security architecture principles, and regulatory/compliance requirements.
- Excellent analytical, troubleshooting, and problem-solving skills.
- Strong verbal and written communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.
- Demonstrated ability to work effectively in a fast-paced environment while managing multiple priorities and competing deadlines.
- Deliver high-impact technology solutions for Tier 1 financial institutions.
- Work in a collaborative, flat, and entrepreneurial consulting culture.
- Access continuous learning, training, and industry certifications.
- Be part of a team shaping the future of digital financial services.
- Help shape the future of cybersecurity, cloud transformation, and cryptographic innovation across banking and payments.
Benefits
- Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
- Retirement Savings Program – RRSP with the option of receiving a matching employer contribution.
- Virtual Health Care and Employee & Family Assistance Program available for employees and eligible dependents.
- Enhanced parental leave top-up, new parent gift, and wellness reimbursement benefits.
- Business Coach from Day 1, providing personalized career guidance, development support, and growth opportunities.
Why This Role Is Open
We are currently hiring for this role due to a newly created vacancy within our organization. This position has been established to support growing business demand and expanding cryptographic security initiatives. We are actively seeking a qualified professional who can make an immediate impact and help strengthen enterprise data protection capabilities.
Inclusion at CapcoWe’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
Use of Artificial Intelligence in Talent AcquisitionAt Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.
AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.
Pay Transparency
The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.
Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.
Skills Required
- Minimum 7 years IT experience in large enterprise environments, including at least 3 years focused on cryptography, encryption, or data protection technologies.
- Strong expertise in cryptographic standards and controls: symmetric/asymmetric encryption, PKI, digital signatures, hashing, key lifecycle management, certificate management.
- Experience validating encryption solutions across databases, storage platforms, applications, and cloud environments.
- Hands-on experience with Thales Vormetric/CipherTrust (or CipherTrust), Venafi, Microsoft ADCS, TLS, SSH, x509 certificates, and enterprise encryption solutions for data at rest and in transit.
- Proficiency in automation and scripting using Python, Bash, PowerShell, Ansible, and API testing tools/automation frameworks.
- Ability to design and build lab environments, develop test strategies, execute testing, and create operational runbooks and automation frameworks.
- Knowledge of Windows, Unix, Linux, and database platforms (SQL Server, Oracle, MongoDB) and enterprise storage technologies (SAN/NAS).
- Industry-recognized security certifications such as CISSP or equivalent.
- Experience supporting ransomware resilience and data protection strategies.
- Knowledge of Post-Quantum Cryptography standards, frameworks, and emerging adoption practices.
- Previous experience within banking, payments, or broader financial services environments.
What the Team is Saying
Capco Compensation & Benefits Highlights
-
Healthcare Strength — Health, dental, and vision coverage in the U.S. are characterized as strong, with good coverage and favorable costs. Mental health resources and broader wellbeing programs are also emphasized as part of a comprehensive package.
-
Leave & Time Off Breadth — PTO and paid holidays are described as generous, with multiple mentions of strong vacation allowances. While client work can affect usage, the underlying entitlement is presented as solid.
-
Parental & Family Support — Company materials highlight enhanced family-friendly policies, including substantial maternity and paternity leave. Flexibility and return-to-work support reinforce a family-oriented approach.
Capco Insights
What We Do
Capco, a Wipro company, is a global management and technology consultancy specializing in driving transformation in the energy and financial services industries. Capco operates at the intersection of business and technology by combining innovative thinking with unrivalled industry knowledge to fast-track digital initiatives for banking and payments, capital markets, wealth and asset management, insurance, and the energy sector. Capco’s cutting edge ingenuity is brought to life through its award-winning Be Yourself At Work culture and diverse talent. TRUSTED ADVISORS - Our collaborative and entrepreneurial approach position us as trusted long-term partners to our clients. DEEP EXPERTISE - Clients look to us for clear guidance, proven expertise, and the support they need to set their companies up for success. DISRUPTIVE SOLUTIONS- We do not provide off -the-shelf answers to clients’ challenges. Instead, we work in close collaboration to understand the issues, and craft disruptive, bespoke solutions. ACCOUNTABILITY AND OWNERSHIP - We recognize every client has distinct needs and expectations, and we take ownership and accountability for the solutions we design, build, and deliver.
Why Work With Us
We support and encourage an inclusive culture, entrepreneurial outlook and independent thinking. Capco is not about organizational charts and rigid hierarchies – we want all employees to feel that Capco is their firm to own and run. We believe diversity powers innovation. Be Yourself At Work (#BYAW) is an integral and underlying part of our culture
Gallery
Capco Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
