Cryptography Operations Engineer

Description

The role manages and monitors the bank's cryptographic assets across all use cases, protecting the confidentiality, integrity and authenticity of sensitive data. It combines day-to-day support with on-call cover, as part of a 24/7 global team.

The team sits in Cryptography Operations within the Chief Information Security Office. The work centres on safeguarding encryption keys and the cryptographic services that provide secure, multi-tenant encryption across several enterprise applications.

This is a hands-on engineering role. You will operate and support production-grade cryptographic applications and key management solutions at scale, working across complex infrastructure, including Windows and Linux servers.

Responsibilities

• Work with internal and external customers and stakeholders to identify their cryptographic needs, and share best practice, including solutions for business applications and processes.
• Run security assessments and penetration tests to find weaknesses in cryptographic implementations and procedures. Help define mitigations, and report findings to senior stakeholders.
• Implement and monitor cryptographic solutions in banking applications, checking they work correctly and meet the Cryptography Standard.
• Manage and support the service of cryptography solutions used across the bank, following Technology Controls and Standards. This covers incident, problem, change and vulnerability management.
• Write training for colleagues on cryptographic concepts, best practice and security procedures, aligned with Standards and industry regulations.
• Help write technical documentation and specifications for cryptographic designs and implementations.
• Act as subject matter expert on cryptographic methods.
• Advise on security controls and push for their improvement and rollout where appropriate.
• Work extensively with Hardware Security Modules, using Thales and Entrust tools.
• Explain complex ideas clearly to both technical and non-technical audiences at every level of leadership.
• Advise and influence decisions, contribute to policy, and own the operational effectiveness of the work.
• Lead a team on complex tasks, set objectives, coach people towards them, and assess performance and reward outcomes.
• Identify ways to reduce risk, write new policies and procedures for control and governance, and own risk and control strengthening for your work.
• Analyse complex data from multiple internal and external sources to solve problems.
• Influence and negotiate with stakeholders to reach outcomes.
• Show the company Values (Respect, Integrity, Service, Excellence and Stewardship) and the company Mindset (Empower, Challenge and Drive).

Requirements

• Experience in cryptography and information security.
• Experience in key management.
• Experience configuring, installing and supporting HSMs.
• Experience in certificate management.
• Ability to influence and negotiate with stakeholders at all levels.
• Excellent attention to detail and accuracy, with the ability to make sound decisions under tight deadlines and juggle several priorities.
• Solid knowledge of symmetric and asymmetric cryptography, cryptographic algorithms and policy-driven security controls.
• Understanding of cryptographic principles, including algorithms, protocols and technologies such as symmetric and asymmetric keys, digital signatures, key exchange and encryption.
• Familiarity with Windows and Linux operating systems.

Conditions

Anchor days are Monday and Tuesday. Standard UK hours are 9 AM to 5 PM, plus a 24/7 on-call rotation.

Some off-site work is required to install equipment in data centres.

You may be assessed on critical skills for the role, such as risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, and job-specific technical skills.