CipherTrust Security Engineer

This role is for a hands-on security engineer to design, build, and scale critical encryption and key management solutions. The position focuses on protecting sensitive enterprise data within a complex, large-scale environment. You will work across Linux and Windows platforms, using automation to harden systems, optimize performance, and advance secure architecture., * Serve as the subject matter expert for the Thales CipherTrust platform, understanding advanced product features and troubleshooting complex issues.

• Lead testing, build implementation stories, and support change and incident management for infrastructure and firmware upgrades.
• Mentor junior engineers, create standards and documentation, and guide best practices to increase the team’s maturity with Thales CipherTrust.
• Consult on complex information security engineering initiatives with broad impact.
• Review and analyze complex, multi-faceted information security challenges.
• Collaborate with internal personnel to resolve situations requiring an understanding of function, policies, and compliance requirements.
• Develop team members by providing technical guidance and fostering a culture of continuous learning.

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, or education.
• 5+ years of experience with Thales CipherTrust Key Manager and CipherTrust Transparent Encryption (CTE).
• 5+ years of intermediate to advanced level experience with scripting or automation using tools such as Bash, PowerShell, Python, or Ansible.
• 5+ years of Unix/Linux/Windows Systems Administration experience with knowledge of troubleshooting, OS hardening, and OS tuning.
• 5+ years of experience with encryption or tokenization technologies.
• 3+ years of experience performing builds, administration, or support of hardware security modules or security appliance devices.
• Advanced knowledge of cryptographic protocols and algorithms.
• Knowledge and understanding of Cryptographic Technologies and Key Management.
• Understanding of format preserving encryption (FPE), tokenization, and transparent data encryption (TDE).
• Knowledge of implementing infrastructure upgrades, security patches, and version upgrades for systems, appliances, and HSMs.
• Experience with Agile Scrum or Kanban methodologies.
• Experience with application support in Linux and Windows server environments.
• Experience with change and incident management practices in medium to large enterprise environments.

Desired Qualifications

• Experience in a complex and fast-paced technology or information security organization within a large enterprise environment.
• Experience performing technical product assessments, including the development of implementation plans.
• Experience mentoring or guiding less experienced staff.
• Analytical skills with attention to detail and accuracy.
• Critical thinking, problem-solving, and technical troubleshooting abilities.
• Security certifications such as CISSP, GIAC, or equivalent.
• Cloud certifications such as AZ-900, MS-900 or equivalent or higher.
• Experience designing, developing, and implementing synthetic transactions for monitoring applications or infrastructure.
• Knowledge of the financial services industry.
• Ability to coordinate the completion of multiple tasks and meet aggressive time frames.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at