DevSecOps Technical Lead - Cryptography

A career as a DevSecOps Technical Lead, Cryptography within the Data Protection and Cryptography team at National Bank means acting as a specialist responsible for the evolution, security, and reliability of the organization's digital certificate management platforms and trust chain.

In this role, you will have a positive impact on data protection, technology service resilience, and the Bank’s cybersecurity posture through your expertise in public key infrastructure (PKI), cloud security, automation, and the operation of critical platforms.

Your Role

• Lead the evolution and modernization of digital certificate management platforms supporting critical services across the Bank.
• Define technology directions related to digital certificates, certificate authorities, and trust chains.
• Support teams in the secure integration of cryptographic services within cloud and hybrid environments.
• Automate the deployment, operation, and renewal of certificates by applying DevSecOps and security-by-design practices.
• Ensure the integration, secure operation, and observability of hardware security modules (HSMs) and cloud-based certificate management services.
• Influence technology decisions and collaborate with security, architecture, compliance, and operations teams to ensure service stability and regulatory compliance.

Your Team

Within the Data Protection and Cryptography sector, you will be part of a specialized team responsible for certificate management services, cryptographic infrastructures, and the Bank’s digital trust foundations. You will report to the Senior Director, Asset Management and Data Protection.

Our team stands out through its technical expertise, strong collaboration, and strategic role in securing platforms and data. As the Bank continues its technology transformation and cloud adoption journey, you will work closely with security, infrastructure, development, and architecture specialists to deliver high-impact initiatives.

We strive to provide maximum flexibility to support your quality of life. This includes a hybrid work environment as well as a flexible and adaptable schedule.

National Bank values continuous development and internal mobility. Our personalized training programs, based on learning through action, allow you to master your profession and develop new areas of expertise. Resources such as the Data Academy, language training, the Harvard Learning Center, as well as coaching and mentoring opportunities, are available to you at all times.

Requirements

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• Significant experience in the architecture, operation, or evolution of enterprise Public Key Infrastructure (PKI) platforms.
• Experience with Amazon Web Services (AWS) certificate management services, including AWS Private Certificate Authority and AWS Certificate Manager, or equivalent technologies.
• Strong knowledge of DevSecOps practices, Infrastructure as Code (IaC), and automation tools such as Terraform and GitHub Actions.
• Deep understanding of Hardware Security Modules (HSMs), cryptographic key management, and digital trust mechanisms within cloud or hybrid environments.
• Knowledge of security and compliance requirements applicable to regulated environments, including the Payment Card Industry Data Security Standard (PCI DSS), as well as observability practices using tools such as Datadog or Splunk.
• Demonstrated leadership through influence, ability to collaborate with multidisciplinary teams, strong analytical skills, autonomy, clear communication, and a proactive approach to solving complex problems.