Cryptographic Security Engineer

NEBIRU; Brussel Hoofdstad; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

NEBIRU is seeking a seasoned IT security professional to join as a freelancer or employee, focusing on HSM, PKI, and cryptographic key management within a high-availability production environment.

You will manage key lifecycles, certificates, and secrets, advise on cryptographic standards, and contribute to crypto-agility initiatives while automating processes and improving operational procedures.

Qualifications

• 5+ years of professional experience in IT security, security engineering, infrastructure security or a closely related discipline.
• Strong hands-on experience with HSM technologies and cryptographic key management.
• Solid knowledge of PKI, digital certificates, encryption and cryptographic concepts.
• Professional experience enterprise secrets-management platforms.
• Good understanding of NIST cryptographic guidance and security standards, with exposure to PCI DSS and/or PSD2.
• Experience operating security platforms in high-availability production environments.
• Ability to troubleshoot complex technical problems and work effectively across infrastructure, applications, architecture and security teams.
• Scripting experience with Python, Bash or similar is an advantage.
• Knowledge of crypto-agility, post-quantum cryptography, EKU or HSM lifecycle management is a strong plus.

Responsabilités

• Operate and maintain critical HSM, PKI, cryptographic key and certificate-management platforms in a high-availability production environment.
• Manage the lifecycle of cryptographic keys, digital certificates and application secrets, including rotation, revocation and access control.
• Administer and troubleshoot HSM technologies
• Investigate and resolve security incidents involving authentication, encryption, certificates and secrets.
• Advise architects, application owners and security stakeholders on cryptographic standards, algorithms and secure implementation patterns.
• Contribute to strategic initiatives including crypto-agility, post-quantum cryptography, EKU readiness and HSM lifecycle management.
• Participate in HSM key ceremonies and ensure secure, controlled operational procedures.
• Translate regulatory and security requirements into practical technical solutions.
• Improve automation, processes and lifecycle management using scripting and modern engineering practices.

Connaissances

HSM technologies

Cryptographic key management

PKI & certificates

Secrets management

Security standards (NIST, PCI DSS, PSD

Description du poste

Looking to start a new challenge as a freelancer OR as a NEBIRU's employee? Get in touch now and let's align on our clients needs.

What you will do

• Operate and maintain critical HSM, PKI, cryptographic key and certificate-management platforms in a high-availability production environment.
• Manage the lifecycle of cryptographic keys, digital certificates and application secrets, including rotation, revocation and access control.
• Administer and troubleshoot HSM technologies
• Investigate and resolve security incidents involving authentication, encryption, certificates and secrets.
• Advise architects, application owners and security stakeholders on cryptographic standards, algorithms and secure implementation patterns.
• Contribute to strategic initiatives including crypto-agility, post-quantum cryptography, EKU readiness and HSM lifecycle management.
• Participate in HSM key ceremonies and ensure secure, controlled operational procedures.
• Translate regulatory and security requirements into practical technical solutions.
• Improve automation, processes and lifecycle management using scripting and modern engineering practices.

What you bring

• 5+ years of professional experience in IT security, security engineering, infrastructure security or a closely related discipline.
• Strong hands-on experience with HSM technologies and cryptographic key management.
• Solid knowledge of PKI, digital certificates, encryption and cryptographic concepts.
• Professional experience enterprise secrets-management platforms.
• Good understanding of NIST cryptographic guidance and security standards, with exposure to PCI DSS and/or PSD2.
• Experience operating security platforms in high-availability production environments.
• Ability to troubleshoot complex technical problems and work effectively across infrastructure, applications, architecture and security teams.
• Scripting experience with Python, Bash or similar is an advantage.
• Knowledge of crypto-agility, post-quantum cryptography, EKU or HSM lifecycle management is a strong plus.

myNEBIRU

Not into this role, but interested in what NEBIRU does? That’s totally fine.

Visit https://nebiru.be/mynebiru to see how we can support you - even outside our client missions. Let’s build the bridge to your next step, together.