Job description
MISTIG is N51's security and concealment layer, the system that encrypts, authenticates, classifies, and tracks every piece of data flowing through the KANATA platform. As Defence Security Engineer, you will own this layer end to end: its cryptographic architecture, its zero-trust network design, its anomaly detection capabilities, and its compliance with Canadian government security frameworks. You will work at the intersection of cutting-edge cryptography and real-world operational security constraints in a classified-adjacent environment.
What will you do?
Design and implement end-to-end encryption across the KANATA data pipeline using post-quantum cryptographic standards. Build and maintain zero-trust authentication and authorisation across all platform components. Develop classification-level data handling and provenance tracking, ensuring every data element carries accurate metadata from ingestion to output. Implement network anomaly detection to identify intrusion attempts or compromise within the platform. Work with the engineering team to conduct threat modelling and security reviews across all product layers. Support security documentation for DND/CAF evaluation and clearance-level demonstration engagements.
Requirements:
- 6+ years in cybersecurity engineering with experience in cryptographic system design
- Hands-on experience with post-quantum cryptography standards (CRYSTALS-Kyber, CRYSTALS-Dilithium, or equivalent) is a strong asset
- Experience designing zero-trust architectures in high-security or classified environments
- Familiarity with Canadian government IT security standards (ITSG-33, CCCS frameworks) is a strong asset
- Experience with network intrusion detection and anomaly detection systems
- Canadian citizenship or permanent residency required
- Security clearance eligibility required — active Secret or Top Secret clearance a significant asset