Cryptography Expert

Ampstek; Milton Keynes; On-site; GBP 110,000 - 150,000; Full time

Job summary

Ampstek is seeking a highly skilled crypto security architect to design and drive crypto solutions. The role focuses on PCI/ANSI-compliant architectures, HSM integration, and robust key management across banking-related platforms.

The candidate will lead architecture forums, engage with senior stakeholders, and ensure secure, scalable deployment of encryption technologies within an agile environment.

Qualifications

• Experience designing crypto architectures that meet PCI and ANSI standards.
• Hands-on HSM experience with multiple vendors and migration projects.
• Deep knowledge of key hierarchies (LMK, ZMK, ZPK, TMK, etc.) and cryptography standards (DES, RSA, AES).
• Able to translate security requirements into implementable architecture and roadmaps.

Responsibilities

• Lead architecture discussions and define the product vision for crypto solutions.
• Collaborate with cards and platforms teams to design, build, test, deploy and support crypto services in agile projects.
• Take ownership of encryption key changes and related platform security improvements.
• Communicate requirements and designs to users, technical teams and senior management.

Skills

Crypto architecture

HSM

Key management

PCI/ANSI standards

Regulatory compliance

Communication with stakeholders

Agile development

Incident management

Job description

• Solid experience in creating and designing Crypto solution and architectures that adhere PCI and ANSI standards and roadmaps.
• Excellent of Crypto and data security services with HSM for banking services.
• Expert experience in key hierarchy (LMK, ZMK, ZPK, TMK, TPK, PVK, CVK and ATM remote key loading) and various Cryptography Standards (Triple DES, RSA, Key Block, AES).
• In depth HSM support experience in dealing with different HSM vendors for project engagement, HSM services migration and incident management.
• Drive continuous improvement and introduction of IT best practices into all areas of process, metrics and performance.
• Review regulatory mandates and work with CISO (Security) team to provide solutions.
• Responsible for ensuring any obsolescence around encryption keys platforms in cards and platforms systems is addressed in timely manner.
• Attend technical forums, architecture forums and be capable of leading the Product vision discussions at various client internal committees.
• Work with cards and platforms SME to support the design, build, testing, deployment, and post-release support in an agile development environment.
• Taking full ownership of the encryption key changes
• Experience in communicating with users, other technical teams and senior management to collect requirements, describe software and product features, technical designs and product strategy.