Senior Cryptography & Information Security SME
Role details
Job location
Tech stack
Job description
We are seeking an experienced Senior Cryptography & Information Security SME to support a large-scale enterprise Cryptography Programme. The successful candidate will be responsible for the design, implementation, management, and operational support of cryptographic services and controls across a complex technology landscape., Cryptography & Security Engineering
- Design, deploy, configure, and support enterprise cryptographic solutions.
- Manage cryptographic key life cycle processes, including generation, distribution, rotation, archival, and destruction.
- Support and administer Hardware Security Modules (HSMs).
- Manage enterprise PKI and Certificate Management platforms.
- Implement and maintain cryptographic controls aligned with security and regulatory requirements.
- Conduct technical reviews and security assessments of cryptographic implementations.
Programme Delivery
- Support the delivery of cryptography-related projects and strategic initiatives.
- Participate in proof-of-concept, testing, implementation, and production deployment activities.
- Collaborate with infrastructure, security, application, and architecture teams.
- Provide technical leadership and consultation to project teams.
Operations & Governance
- Support incident, problem, risk, and change management activities.
- Develop operational processes, standards, procedures, and technical documentation.
- Participate in root cause investigations and remediation planning.
- Ensure compliance with enterprise security policies and governance standards.
Stakeholder Management
- Engage with technical and non-technical stakeholders.
- Present recommendations, risks, and technical solutions to leadership teams.
- Provide mentorship and knowledge transfer to operational support teams., * HashiCorp Vault
- AWS KMS
- Azure Key Vault
- Google Cloud KMS
- Thales CipherTrust Manager
- Operating Systems
- Linux (RHEL, CentOS, Ubuntu)
- Windows Server
- Security & Monitoring
- Splunk
- Microsoft Sentinel
- QRadar
- Dynatrace
- Datadog
- Infrastructure & Automation
- PowerShell
- Python
- Bash/Shell Scripting
- Ansible
- Terraform
- Git
Requirements
The role requires deep technical expertise in cryptography, strong stakeholder engagement skills, and the ability to drive secure outcomes within highly regulated environments., * Bachelor's Degree in Cyber Security, Information Security, Computer Science, Engineering, Information Technology, or a related discipline.
- Equivalent professional experience may be considered in lieu of formal education.
Experience:
- 7+ years of information security experience.
- 5+ years of hands-on cryptography experience.
- Experience working in enterprise-scale infrastructure environments.
- Experience supporting security programmes within regulated industries such as Financial Services, Banking, Insurance, or government.
Preferred Certifications:
One or more of the following:
- Security Certifications
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CCSP (Certified Cloud Security Professional)
- GIAC Security Certifications
- SABSA Foundation or Practitioner
- ISO 27001 Lead Implementer or Lead Auditor
- Cryptography & PKI Certifications
- Entrust PKI Certification
- Thales Luna HSM Training/Certification
- DigiCert PKI Certifications
- Venafi Professional Certification
- Microsoft Security Certifications
Preferred Technical Tools & Platforms
- HSM Platforms
- Thales Luna HSM
- Entrust nShield HSM
- AWS CloudHSM
- Azure Dedicated HSM
- PKI & Certificate Management
- Microsoft Active Directory Certificate Services (ADCS)
- DigiCert
- Entrust PKI
- Venafi
- Keyfactor
- AppViewX