Cryptographic HSM and Key Management Engineer

Description

This role is for an experienced, hands-on engineer who will help protect the company's systems and sensitive data through cryptographic solutions and key management.

You will sit in the Chief Information Security Office and help safeguard encryption keys and cryptographic services that provide secure, multi-tenant encryption for more than 300 enterprise platforms.

You will need strong knowledge of symmetric and asymmetric cryptography, cryptographic algorithms and policy-driven security controls.

Much of the work involves Hardware Security Modules from Thales and Entrust, and running production-grade cryptographic applications and key management systems at scale.

You will work across complex infrastructure, including Windows and Linux servers.

Selection may assess key skills for the role, including risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, and job-specific technical skills.

Responsibilities

• Give expert advice on security systems and engineering patterns.
• Design, build and maintain protocols, algorithms and software that protect sensitive data and systems.
• Generate, store and use secrets securely, and manage them throughout their lifecycle.
• Audit infrastructure and software to find and assess vulnerabilities, and support the response when a security breach is suspected.
• Research new cryptographic technologies and techniques, and help the company adopt those that are worth it.
• Work with developers, security teams and other business areas so that cryptographic solutions meet business goals, security policy and regulatory requirements.
• Build and maintain identity and access management solutions and systems.
• At Assistant Vice President level, advise on decisions, help shape policy, and take responsibility for how well operations run.
• If you lead people, set objectives, coach your team, appraise performance and decide reward outcomes, and model the company's LEAD behaviours: listen and be authentic, energise and inspire, align across the enterprise, and develop others.

Requirements

• Experience in cryptography and information security, including key management, HSM configuration, installation and support, and certificate management.
• Ability to diagnose and fix certificate problems across applications, networks and operating systems, including configuration, connectivity and hardware failures.
• ITIL certification.
• Strong stakeholder management skills, with the ability to influence and negotiate at every level.
• A valid driving licence with no driving convictions.
• Excellent attention to detail and accuracy.
• Ability to make sound decisions under tight deadlines while managing several priorities at once.
• Highly valued: security or project management certifications.
• Highly valued: background in operational environments, IT infrastructure, incident response and change management.
• Highly valued: strong documentation skills for writing operational procedures.
• Highly valued: familiarity with SharePoint, Confluence and JIRA.
• Highly valued: knowledge of Unix and Windows operating systems.

Conditions

Standard UK working hours of 9 AM to 5 PM, plus a 24/7 on-call rotation.

Off-site working will be required to install equipment in data centres.

A driving assessment is part of the role.

Based at Radbroke Hall, Knutsford.