Sr Cryptography Analyst - Secrets Management

As a Senior Cryptography Analyst at Aviva Canada, you safeguard the organization's cryptographic assets and manage keys, secrets, and certificates. You drive Post-Quantum Cryptography readiness and provide governance and operational oversight of two business-critical 24x7 cryptographic services, serving as a trusted advisor on cryptographic strategy, compliance, and transformation.

What you'll do

• Act as the enterprise subject matter expert for cryptography, encryption, PKI, and secrets management, advising teams on encryption strategies, cryptographic controls, and approved solutions.
• Develop and maintain cryptographic standards, procedures, and guidelines; review solution designs and provide guidance on encryption at rest and in transit, key and secrets management, certificates, and algorithms.
• Support security architecture reviews and risk assessments.
• Own governance and lifecycle management of enterprise encryption keys and secrets, including key generation, storage, rotation, archival, and destruction.
• Manage HashiCorp Vault services to protect privileged secrets and cryptographic assets, ensuring compliance with industry standards and regulatory requirements.
• Define and monitor key management benchmarks and the efficiency of operations.
• Provide administration and operational oversight of HashiCorp Vault platforms, managing authentication, RBAC, access governance, secrets lifecycle, and tenant onboarding and offboarding.
• Support integrations with AWS KMS, HSMs, cloud secret stores, and automation platforms.
• Lead efforts to fix issues, drive incident resolution, and support platform modernization initiatives.
• Own TLS and SSL certificate governance and lifecycle management, overseeing certificate issuance, renewal, replacement, revocation, and retirement.
• Drive automation using ACME, Sectigo, Vault PKI, Cert-Manager, Kubernetes, and cloud-native services.
• Establish certificate standards for CAs, key lengths, algorithms, and ownership; reduce manual processes through automation and continuous improvement.
• Lead enterprise Post-Quantum Cryptography readiness assessments and maintain visibility of cryptographic assets across applications, certificates, keys, and secrets.
• Assess Post-Quantum Cryptography risks and develop transition and remediation strategies in partnership with architecture and engineering teams.
• Monitor industry and regulatory developments in quantum-resistant cryptography.
• Provide operational leadership for TLS Certificate Management and HashiCorp Vault services, overseeing contractor resources, service delivery, and operational priorities.
• Monitor service performance, availability, incidents, and improvement opportunities; ensure resilience, availability, and continuous service enhancement.
• Function as the main point of contact for major incidents, emergencies, and service outages; participate in after-hours support and incident response.
• Lead root cause analysis and remediation of cryptography-related issues and support change management and CAB activities.
• Support enterprise HSM infrastructure, including Thales Luna HSM platforms, managing auto-unseal configurations, root key protection, key rotation, and disaster recovery.
• Coordinate platform upgrades and lifecycle management; maintain secure root-of-trust controls across cryptographic services.
• Serve as the authority for enterprise cryptographic compliance and governance, ensuring alignment with security policies, regulations, audit requirements, and governance frameworks.
• Support audits, maintain compliance evidence and reporting, and identify and remediate cryptographic risks and control gaps.
• Develop executive and operational reporting for cryptographic services and track critical metrics covering Vault health, certificate management, automation, compliance, and Post-Quantum Cryptography readiness.
• Leverage monitoring and reporting tools including Dynatrace, Rapid7, SiteScope, Power BI, and Excel to provide insights for improving service performance and governance.

What you bring

• Extensive experience with HashiCorp Vault administration and governance.
• Strong PKI and TLS certificate lifecycle management experience.
• Experience implementing and supporting TLS certificate automation solutions.
• Experience performing Post-Quantum Cryptography assessments and readiness planning.
• Solid understanding of encryption standards, cryptographic algorithms, and key management practices.
• Experience with Hardware Security Modules, preferably Thales Luna.
• Knowledge of AWS cloud services and KMS technologies.
• Experience integrating cryptographic services into enterprise platforms and applications.
• Scripting and automation experience using APIs and CI/CD pipelines.
• Experience leading vendors, consultants, or contract resources.
• Ability to influence security and technology decisions across multiple teams.
• Strong understanding of regulatory, audit, and compliance requirements.
• Experience operating critical production services within a 24x7 environment.
• Strong incident and problem management experience.

Nice to have

• Experience in insurance or financial services.
• Kubernetes and Cert-Manager experience.
• Cloud security and DevSecOps experience.
• Post-Quantum Cryptography frameworks, standards, and industry transition planning experience.

What we offer

• Salary range of $100,000 to $125,000, determined by job-related knowledge, skills, experience, and internal equity.
• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, and health benefits.
• Personal wellness and volunteer opportunities.
• Outstanding career development opportunities and support for professional development education.
• Competitive vacation package with the option to purchase 5 additional days off per year.
• Employee-driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
• Corporate wellness programs to support physical and mental health.
• Employee discount on home and auto insurance where applicable.
• Hybrid flexible work model.

About Aviva Canada

Aviva Canada is an insurance organization committed to putting people first and building a culture based on care, inclusion, and collaboration. The company protects what matters most to its employees, customers, and communities.