Operation Security Engineer Cryptography - Permanent

Join a Key, Certificate, and Key Management squad within the Production Security BE tribe! This team of about 15 experts based in Belgium specializes in the lifecycle management of cryptographic keys, certificates (internal/group/public), and application secrets (via Hashicorp Vault).

The mission is to secure electronic transactions, authentications, and cloud-hosted applications while ensuring full compliance with EU/Group regulations (e.g., PSD2, PCI) and industry standards.

As part of the broader System Security Cluster, the team operates and supports Hardware Security Modules (HSMs) like Adyton and nCipher, enabling a trustworthy environment for both internal and external customers. Innovation drives the team; they are the go-to partners for stakeholders, delivering cost-efficient, reliable security solutions that keep the bank and its clients safe. Missions

1. Operations

• Manage the lifecycle of cryptographic keys, digital certificates, and application secrets (e.g., rotation, revocation, access control).
• Monitor and maintain HSM infrastructures (Adyton, nCipher, mainframe TKE) to ensure high availability and compliance.
• Troubleshoot incidents and collaborate with teams to resolve security gaps in authentication, encryption, or secret storage.

1. Expertise & Projects

• Act as a Crypto Design Authority (advise on cryptographic standards, algorithms, and best practices such as NIST, PCI-DSS, PSD2).
• Lead or contribute to strategic projects, including:
• Post-Quantum Cryptography (assess risks, contribute to the migration of quantum resistant solutions)
• EKU Readiness (prepare systems for Extended Key Usage (EKU) compliance)
• HSM Lifecycle Management (LCM) (operate HSM support and configuration)
• HSM: Key Ceremonies
• Crypto Agility: improve certificate and key lifecycle management processes
• Platform Integration: align with Group tools (Certis, Horizon)
• Partner with COE Security, Group Security, and other stakeholders like IT architects and IT application owners to translate regulatory and business requirements into technical solutions.

• Secrets management: Hashicorp Vault
• Microsoft Office (Word, Excel, PowerPoint)
• Preferable: Scripting (Python, Bash), ServiceNow, Rally, Portunus, Certis, Horizon

Working Conditions

• Language requirements:
• Dutch: a plus
• French: fluent spoken
• English: fluent spoken and written
• Telework expectation: 50% on site & 50% homeworking
• Required experience: at least 5 years of relevant experience
• Contract and compensation details not specified in the description provided.

Requirements

1. At least 5 years of relevant experience
2. Deep IT security expertise with technical mastery of HSMs (Adyton/nCipher), PKI, Hashicorp Vault, and cryptographic standards (NIST)
3. Sharp operational oversight of high-availability infrastructures
4. Proficiency in Microsoft Office (Word, Excel, PowerPoint)
5. Preferable experience with scripting (Python, Bash), ServiceNow, Rally, Portunus, Adyton, nCipher, and HashiCorpVault
6. Ability to bridge technical and business requirements into feasible IT solutions balancing cost efficiency, compliance, and developer practicality
7. Experience or familiarity with Agile methodology and adaptability in a fast-evolving landscape
8. Strong collaboration skills and results-driven mindset working with stakeholders like IT architects, application owners, and security teams
9. Client-centric approach translating complex cryptographic requirements into practical, user-friendly implementations
10. Proactive and analytical mindset to spot risks and enhance security processes
11. Fluent spoken and written English and fluent spoken French; Dutch is a plus