Senior Certificate Key Management (CKM) Consultant to support Key management and PKI infrastructure for a financial services client

Duration:  6 mo (high chance of extension or conversion to perm) 
Location:  Hybrid Downtown Toronto 

Our Financial Services client is in need of a Senior Certificate Key Management (CKM) Consultant to support Key management and PKI infrastructure.

Must Have:

• 4+ years experience as a CKM Consultant
  • encryption algorithms both asymmetric and symmetric, key management and certificate use cases, and hands-on experience establishing the required infrastructure, technologies, and concepts to enable these
• 3+ years experience with PKI and symmetric cryptography 
  • data-at-rest and data-in-transit encryption techniques and methodologies, including database, file, disk encryption, as well as Transport Layer Security (TLS), Secure Shell (SSH)
• 2+ years experience  building and operating Certificate Authorities (CA's) including:
  • security protections, protection of the associated private keys and definition and implementation of Certification Practice Statement and Certificate Policies supporting the CA's and resulting certificates.

Nice to Haves:

• Previous Financial Services experience 

Key Responsibilities

• Partner with team members in information security, network, infrastructure and application support teams to build and operate an effective Certificate Management Solution as aligned to business requirements, technical standards, and security frameworks.
• Lead/recommend overall CKM strategy and roadmap, including, but not limited to: enterprise key and certificate management, the related public key infrastructure, certification authorities (CAs), hardware security modules , and hybrid public/private cloud integration.
• Produce technical solution documents, design/architecture documents, and security design documentation as required to support new, proposed or existing CKM solutions.
• Deliver technical presentations and/or knowledge walkthroughs of existing and proposed systems to various audiences including project team members, peer technology teams and senior management.