Back to results

DevSecOps Technical Lead, Cryptography

  • Montreal, QC, Canada

Full-time

Applications open in a new tab.

Job details

Job type
Full-time
Apply by
Posting language
English
Posted

Original job description


A career as a DevSecOps Technical Lead, Cryptography within the Data Protection and Cryptography team at National Bank means acting as a specialist responsible for the evolution, security, and reliability of the organization's digital certificate management platforms and trust chain.
In this role, you will have a positive impact on data protection, technology service resilience, and the Bank’s cybersecurity posture through your expertise in public key infrastructure (PKI), cloud security, automation, and the operation of critical platforms.Your Role
  • Lead the evolution and modernization of digital certificate management platforms supporting critical services across the Bank.
  • Define technology directions related to digital certificates, certificate authorities, and trust chains.
  • Support teams in the secure integration of cryptographic services within cloud and hybrid environments.
  • Automate the deployment, operation, and renewal of certificates by applying DevSecOps and security-by-design practices.
  • Ensure the integration, secure operation, and observability of hardware security modules (HSMs) and cloud-based certificate management services.
  • Influence technology decisions and collaborate with security, architecture, compliance, and operations teams to ensure service stability and regulatory compliance.
Your TeamWithin the Data Protection and Cryptography sector, you will be part of a specialized team responsible for certificate management services, cryptographic infrastructures, and the Bank’s digital trust foundations. You will report to the Senior Director, Asset Management and Data Protection.Our team stands out through its technical expertise, strong collaboration, and strategic role in securing platforms and data. As the Bank continues its technology transformation and cloud adoption journey, you will work closely with security, infrastructure, development, and architecture specialists to deliver high-impact initiatives.We strive to provide maximum flexibility to support your quality of life. This includes a hybrid work environment as well as a flexible and adaptable schedule.National Bank values continuous development and internal mobility. Our personalized training programs, based on learning through action, allow you to master your profession and develop new areas of expertise. Resources such as the Data Academy, language training, the Harvard Learning Center, as well as coaching and mentoring opportunities, are available to you at all times.Requirements
  • Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
  • Significant experience in the architecture, operation, or evolution of enterprise Public Key Infrastructure (PKI) platforms.
  • Experience with Amazon Web Services (AWS) certificate management services, including AWS Private Certificate Authority and AWS Certificate Manager, or equivalent technologies.
  • Strong knowledge of DevSecOps practices, Infrastructure as Code (IaC), and automation tools such as Terraform and GitHub Actions.
  • Deep understanding of Hardware Security Modules (HSMs), cryptographic key management, and digital trust mechanisms within cloud or hybrid environments.
  • Knowledge of security and compliance requirements applicable to regulated environments, including the Payment Card Industry Data Security Standard (PCI DSS), as well as observability practices using tools such as Datadog or Splunk.
  • Demonstrated leadership through influence, ability to collaborate with multidisciplinary teams, strong analytical skills, autonomy, clear communication, and a proactive approach to solving complex problems.



Languages: French, English
Reason to require this language: you will need to discuss frequently with our service providers or partners who speak a language other than French.
Required skills: Amazon Web Services, Application Security, Automation, Datadog, Decision Making, DevOps, Diversity & Inclusion, Github, GitHub Actions, Infrastructure as Code, Initiative, Leadership, Solution Design, System Deployment, System Observability, Teamwork, Terraform

Your benefits
In addition to competitive compensation, upon hiring you’ll be eligible for a wide range of flexible benefits to help promote your wellbeing and that of your family such as:

* Health and wellness program, including many options
* Flexible group insurance
* Generous pension plan
* Employee Share Ownership Plan
* Employee and family assistance program
* Preferential banking services
* Involvement in community initiatives
* Telemedicine service
* Virtual sleep clinic

We have an offer that keeps up with trends as well as your needs and those of your family.

Our dynamic work environments and cutting-edge collaboration tools foster a positive employee experience. We value employees’ ideas. Whether through our surveys or programs, regular feedback and ongoing communication are encouraged.

Making a bold move in a people-first environment
We’re a bank on a human scale that stands out for its courage, entrepreneurial culture, and passion for people. Our mission is to have a positive impact on people’s lives. Our core values of partnership, agility, and empowerment inspire us, and inclusion is central to our commitments. We aim, wherever possible, to provide a barrier-free and accessible environment to all employees.

We strive to provide accessibility measures throughout the recruitment process within the limits of our available resources. If you require accommodations, feel free to let us know during our initial conversations. We welcome all candidates! What can you bring to our team?

Join us!
More about this job

Responsibilities

Lead the evolution and secure operation of enterprise certificate management platforms, public key infrastructure, trust chains, and hardware security modules across cloud and hybrid environments. Define technology direction, automate certificate deployment and renewal, and collaborate with security, architecture, compliance, and operations teams to maintain resilient and compliant services.

Requirements

Requires a bachelor's degree in computer science, software engineering, cybersecurity, or a related field, along with significant experience architecting, operating, or evolving enterprise PKI platforms. Candidates should have expertise in AWS certificate services, DevSecOps, Infrastructure as Code, Terraform, GitHub Actions, HSMs, cryptographic key management, PCI DSS, and observability tools, as well as strong leadership and collaboration skills.

Skills

  • Amazon Web Services
  • Application Security
  • Automation
  • Datadog
  • Decision Making
  • DevOps
  • GitHub Actions
  • Infrastructure as Code
  • Leadership
  • Solution Design
  • System Deployment
  • System Observability
  • Teamwork
  • Terraform
  • Public Key Infrastructure
  • Hardware Security Modules

Benefits

  • Health and Wellness Program
  • Flexible Group Insurance
  • Pension Plan
  • Employee Share Ownership Plan
  • Employee and Family Assistance Program
  • Preferential Banking Services
  • Community Initiatives
  • Telemedicine Service
  • Virtual Sleep Clinic

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Security & Safety
  • Software
  • Management & Leadership

Keywords

  • Public Key Infrastructure
  • PKI
  • Digital Certificates
  • Certificate Authorities
  • Trust Chains
  • AWS Private Certificate Authority
  • AWS Certificate Manager
  • Amazon Web Services
  • DevSecOps
  • Infrastructure as Code
  • Terraform
  • GitHub Actions
  • Hardware Security Modules
  • HSM
  • Cryptographic Key Management
  • Cloud Security
  • Hybrid Cloud
  • Certificate Management
  • Automation
  • Security by Design
  • PCI DSS
  • Datadog
  • Splunk
  • System Observability
  • Application Security
  • Regulatory Compliance
  • Platform Resilience
  • Data Protection
  • Cybersecurity
  • Certificate Renewal

Report this job