Senior Cryptography Analyst

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

At Aviva Canada
, we put people first, our employees, our customers, and our communities. We’re proud of a culture built on care, inclusion, and collaboration, where your voice matters and your growth is supported. We’re not just about insurance; we’re about making a real difference by protecting what matters most.

• Act as the enterprise SME for cryptography, encryption, PKI, and secrets management.
• Advise teams on encryption strategies, cryptographic controls, and approved solutions.
• Develop and maintain cryptographic standards, procedures, and guidelines.
• Review solution designs and provide guidance on encryption at rest/in transit, key and secrets management, certificates, and algorithms.
• Support security architecture reviews and risk assessments.

• Own governance and lifecycle management of enterprise encryption keys and secrets.
• Oversee key generation, storage, rotation, archival, and destruction.
• Manage Hashi Corp Vault services and protect privileged secrets and cryptographic assets.
• Ensure compliance with industry standards and regulatory requirements.
• Define and monitor key management benchmarks and the efficiency of operations.

• Provide administration and operational oversight of Hashi Corp Vault platforms.
• Manage authentication, RBAC, access governance, secrets lifecycle, and tenant onboarding/offboarding.
• Support integrations with AWS KMS, HSMs, cloud secret stores, and automation platforms.
• Lead efforts to fix issues, incident resolution, and platform modernization initiatives.

• Own TLS/SSL certificate governance and lifecycle management.
• Oversee certificate issuance, renewal, replacement, revocation, and retirement.
• Drive automation using ACME, Sectigo, Vault PKI, Cert-Manager, Kubernetes, and cloud-native services.
• Establish certificate standards for CAs, key lengths, algorithms, and ownership.
• Reduce manual processes through automation and continuous improvement.

• Lead enterprise PQC readiness assessments.
• Maintain visibility of cryptographic assets across applications, certificates, keys, and secrets.
• Assess PQC risks and develop transition and remediation strategies.
• Partner with architecture and engineering teams on migration planning.
• Monitor industry and regulatory developments in quantum-resistant cryptography.

• Provide operational leadership for TLS Certificate Management and Hashi Corp Vault services.
• Oversee contractor resources, service delivery, and operational priorities.
• Monitor service performance, availability, incidents, and improvement opportunities.
• Ensure resilience, availability, and continuous service enhancement.

• Function as the main point of contact for major incidents, emergencies, and service outages related to customer concerns.
• Participate in after-hours support and incident response.
• Lead root cause analysis and remediation of cryptography-related issues.
• Support change management, CAB activities, and proactive risk mitigation.

• Support enterprise HSM infrastructure, including Thales Luna HSM platforms.
• Manage auto-unseal configurations, root key protection, key rotation, and disaster recovery.
• Coordinate platform upgrades and lifecycle management.
• Maintain secure root-of-trust controls across cryptographic services.

• Serve as the authority for enterprise cryptographic compliance and governance.
• Ensure alignment with security policies, regulations, audit requirements, and governance frameworks.
• Support audits and maintain compliance evidence and reporting.
• Identify and remediate cryptographic risks and control gaps.

• Develop executive and operational reporting for cryptographic services.
• Track critical metrics covering Vault…