Cryptography & Key Management Security Engineer

Навыки

• Agile
• Bash / shell
• ISO 27001 / PCI DSS
• Naumen / ServiceNow / OTRS
• Решение задач
• Python
• Работа со стейкхолдерами

О компании и продукте

• Capco is a global business and technology consultancy specializing in the financial services and energy industries. We bring together industry knowledge, technology expertise, and an innovative mindset to support clients in complex transformation initiatives.
• At Capco, you will be part of a collaborative and entrepreneurial environment where you can work alongside experienced professionals, expand your expertise, and contribute to impactful projects across the financial services industry.
• We are looking for an experienced Cryptography & Key Management Security Engineer with strong expertise in cryptographic technologies, PKI, Hardware Security Modules (HSMs), and secrets management.
• This is a specialist role for security professionals who enjoy combining hands-on operational responsibilities with security advisory and strategic project work .

Задачи

• Manage the lifecycle of cryptographic keys, digital certificates, and application secrets , including rotation, renewal, revocation, and access management
• Operate, monitor, and support Hardware Security Module (HSM) infrastructures and other cryptographic platforms
• Help ensure high availability, operational stability, and compliance of security-critical infrastructure
• Support and execute cryptographic key ceremonies
• Investigate and resolve incidents related to encryption, authentication, certificates, key management, and secrets management
• Support PKI and certificate lifecycle management activities
• Work with HashiCorp Vault or comparable technologies for secure application secrets management
• Identify security risks and contribute to structural improvements and automation
• Collaborate with engineering and application teams to integrate cryptographic services securely into their environments
• Act as a trusted subject matter expert on cryptographic technologies, standards, algorithms, and security best practices
• You will also have the opportunity to contribute to strategic security initiatives in areas such as
• Post-Quantum Cryptography – assessing cryptographic risks and helping organizations prepare for the transition towards quantum-resistant solutions
• Crypto Agility – improving the ability to replace, rotate, and manage cryptographic algorithms, keys, and certificates efficiently
• PKI & Certificate Readiness – preparing applications and platforms for evolving certificate and Extended Key Usage requirements
• HSM Lifecycle Management – supporting upgrades, migrations, configuration, and renewal of HSM platforms
• Key Management – improving governance and operational processes around cryptographic keys
• Security Automation – automating certificate, key, and secrets management processes where possible
• Platform Integration – integrating cryptographic and security services into broader enterprise technology environments

Требования

• Experience
• 5+ years of relevant professional experience within IT Security, cybersecurity, cryptography, PKI, security infrastructure, or key management
• Strong hands-on experience in technically complex and business-critical IT environments
• Experience operating or supporting high-availability security infrastructure
• Experience working with multiple technical and business stakeholders
• Previous experience within financial services or another highly regulated environment is strongly valued
• Experience working in Agile environments is considered an advantage
• Business & Technical Skills
• We are looking for a professional with strong knowledge in several of the following areas
• Hardware Security Modules (HSMs)
• Public Key Infrastructure (PKI)
• Digital certificates and certificate lifecycle management
• Cryptographic key management
• HashiCorp Vault or similar secrets management platforms
• Cryptographic algorithms and standards
• Encryption and authentication technologies
• High-availability security infrastructure
• Security and access management
• Security compliance and regulatory requirements
• Cryptographic key ceremonies
• Hands-on experience with enterprise HSM technologies such as nCipher/Entrust or comparable platforms is a strong advantage
• Knowledge of the following is also valuable
• NIST cryptographic standards and recommendations
• PCI-DSS and other security frameworks
• European financial services security and regulatory requirements

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.