Job SummaryThe Cybersecurity Engineer will join the Crypto team within Technology to implement, support, and manage cryptographic infrastructure that protects sensitive data and transactions. This role focuses on secure cryptographic services, Hardware Security Modules (HSMs), encryption key lifecycle management, key management platforms, automation, and regulatory compliance.
The position will collaborate with cybersecurity, risk, compliance, and application teams to maintain secure and reliable cryptographic solutions while driving automation and operational improvements.
Key Responsibilities- Build, maintain, and support cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
- Manage the complete encryption key lifecycle, including key generation, rotation, archival, and destruction.
- Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
- Troubleshoot and resolve complex issues involving cryptographic systems, HSMs, key management platforms, and vaults.
- Collaborate with cybersecurity, risk, and compliance teams to meet internal security controls and regulatory requirements.
- Develop automation and process improvements for certificate and key management workflows.
- Utilize scripting technologies such as PowerShell and Python to improve operational efficiency.
- Monitor and support cryptographic infrastructure using applicable observability tools.
- Maintain technical documentation, FAQs, and other customer support materials.
- Contribute to complex projects and cybersecurity initiatives.
- Communicate with team members, leadership, and stakeholders regarding technical activities, plans, and issues.
- Analyze technical information, translate findings into actionable plans, and present summaries to stakeholders.
Required Qualifications- At least 2 years of relevant experience supporting cybersecurity, cryptographic infrastructure, or related technologies.
- Understanding of encryption key lifecycle management, including generation, rotation, archival, and destruction.
- Experience supporting cryptographic infrastructure and key management platforms such as CipherTrust Manager and Luna Hardware Security Modules (HSMs).
- Experience with automation and scripting using PowerShell, Python, or similar technologies.
- Ability to integrate cryptographic services with enterprise applications using KMIP and PKCS#11.
- Proficiency with Linux or another Unix variant.
- Experience or knowledge of observability tools such as Prometheus and Grafana.
- Understanding of regulatory requirements and risk controls related to cryptographic infrastructure.
- Ability to troubleshoot complex cryptographic systems and infrastructure issues.
- Strong ability to analyze information, develop actionable plans, and communicate summaries to stakeholders.
- Understanding of relevant business and cybersecurity disciplines.
