Cryptographic HSM and Key Management Engineer

Overview

In this role you safeguard encryption keys and cryptographic services across a multi-platform environment. You’ll operate with HSMs (Thales and Entrust) and lead cryptographic solutions that align with policy, security, and regulatory needs. You’ll collaborate with cross-functional teams to implement secure, scalable key management and IAM systems. You’ll thrive in a hands-on, security-focused setting that supports enterprise-grade multi-tenant encryption.

Responsibilities

• Provide subject matter expertise on security systems and engineering patterns
• Develop and implement protocols, algorithms, and software for protecting data and systems
• Manage and protect secrets (generation, storage, usage)
• Conduct audits to identify vulnerabilities and support incident response
• Identify advancements to enable new cryptographic technologies
• Collaborate across the bank to align cryptographic solutions with business, security, and regulatory requirements
• Develop/implement and maintain Identity and Access Management solutions and systems

Key requirements

• Experience in Cryptography and Information Security including Key Management, HSM configuration/installation/support and Certificate Management
• Ability to diagnose and resolve certificate issues across applications, networks, and OS
• Strong ITIL certification and stakeholder management skills
• Valid driving licence with no convictions; driving assessment will be conducted
• Excellent attention to detail and accuracy; ability to decide under tight deadlines and manage priorities

• Stakeholder management
• Communication of complex information
• Collaborative working across teams
• Cryptography and cryptographic algorithms
• Key management and certificate management
• HSM configuration/installation/support (Thales, Entrust)

…