Hybrid Cryptography & Key Management Engineer – Belgium

Capco; Brussel Hoofdstad; Hybride; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Capco in Belgium is seeking an experienced Cryptography & Key Management Security Engineer. You will apply PKI, HSMs, and secrets management to secure complex financial services environments with a hands-on yet advisory focus.

Collaborating with security architects, engineers, and application teams, you will design scalable cryptographic solutions, lead key ceremonies, and support PKI lifecycle activities. Fluent English is required; French is a plus.

Qualifications

• 5+ years of relevant professional experience in IT security, cryptography, PKI, or key management.
• Hands-on experience with highly available security infrastructure and enterprise cryptography.
• Experience working with multiple stakeholders in regulated environments (financial services).
• Knowledge of HSM technologies and certificates lifecycle management.
• Experience with HashiCorp Vault or similar secrets management platforms.

Responsabilités

• Manage lifecycle of cryptographic keys, digital certificates, and application secrets.
• Operate and support HSM infrastructures and cryptographic platforms.
• Lead cryptographic key ceremonies and PKI lifecycle activities.
• Investigate incidents related to encryption, certificates, and secrets management.
• Collaborate with engineering teams to integrate cryptographic services securely.

Connaissances

HSMs

PKI

Secrets Management

HashiCorp Vault

Cryptographic Standards

Crypto Agility

Post-Quantum Cryptography

Security Infrastructure

Encryption & Authentication

Outils

nCipher/Entrust

Description du poste

Capco in Belgium is seeking an experienced Cryptography & Key Management Security Engineer. You will apply PKI, HSMs, and secrets management to secure complex financial services environments with a hands-on yet advisory focus.

Collaborating with security architects, engineers, and application teams, you will design scalable cryptographic solutions, lead key ceremonies, and support PKI lifecycle activities. Fluent English is required; French is a plus.