Cryptography Engineer

Help secure the future of banking through enterprise-scale cryptographic innovation. The Role Capco is seeking an experienced Cryptography Engineer. This newly created role will sit within a Crypto Certification team, responsible for validating and certifying enterprise data protection solutions and new cryptographic use cases before enterprise adoption. Working at the intersection of cloud, cybersecurity, and financial services, you will collaborate closely with Crypto Requirements, Security Architecture, and Crypto Engineering teams to design, test, validate, and document cryptographic solutions that protect critical banking and payments infrastructure. This role offers the opportunity to influence the future of enterprise encryption, certificate management, and post-quantum cryptography initiatives. What You’ll Do Automation Design and Development Design, develop, test, and deploy automated solutions and workflows for cryptographic services and operations, including: Certificate lifecycle management (issuance, renewal, revocation, and compliance monitoring). Symmetric and asymmetric key generation, distribution, rotation, escrow, and retirement. Integration with enterprise-approved key management and certificate management platforms. Cryptographic Service Integration Develop APIs, automation frameworks, and reusable tools that enable seamless integration of cryptographic services (encryption, decryption, digital signing, verification, and key management) into enterprise applications, infrastructure platforms, and CI/CD pipelines. Cryptographic Solution Certification Evaluate, validate, and certify cryptographic products, platforms, and integrations to ensure they meet enterprise security, risk, compliance, and operational requirements. Develop certification standards, test plans, and implementation guidance to support enterprise adoption of approved cryptographic solutions. Tooling and Software Development Develop and maintain high-quality, secure, and maintainable code using languages such as Python, PowerShell, and Bash. Leverage modern automation and orchestration platforms to accelerate cryptographic service delivery and reduce operational risk. Documentation and Standards Produce and maintain comprehensive technical documentation, including automation workflows, operational procedures, certification artifacts, and configuration standards. Contribute to enterprise cryptographic standards, best practices, and governance requirements. What We're Looking For 7+ years of overall technology experience. 3+ years of experience in Security Engineering, DevSecOps, SRE, Infrastructure Engineering, or Software Engineering with a strong focus on automation and security. Proven experience designing and implementing automation solutions for certificate lifecycle management and cryptographic operations. Hands-on experience with enterprise certificate management platforms such as Venafi and key management platform such as CipherTrust Manager Strong proficiency in one or more scripting/programming languages, including Python, PowerShell, and Bash. Hands-on experience with automation and Infrastructure-as-Code tools such as Ansible, Terraform, Jenkins, GitHub Actions, or equivalent platforms. Strong understanding of cryptographic fundamentals, including: Symmetric and asymmetric encryption Key management and lifecycle management Public Key Infrastructure (PKI) TLS/SSL Digital signatures and hashing algorithms Experience supporting Linux and/or Windows server environments. Strong understanding of security controls, security architecture principles, and regulatory/compliance requirements. Excellent analytical, troubleshooting, and problem-solving skills. Strong verbal and written communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences. Demonstrated ability to work effectively in a fast-paced environment while managing multiple priorities and competing deadlines. Why Joi…