Cybersecurity Engineer – Cryptography & Key Management (f/m)

Woodward Poland Sp.zo.o; Niepołomice; Hybrid; PLN 156,000 - 251,000; Full time

Benefits offered by this job

Private health insurance

Life & accidental insurance

Multisport package

Meal vouchers

Company performance bonus

Job summary

Woodward Poland Sp.zo.o is seeking a Cybersecurity Engineer – Cryptography & Key Management to operate and expand our CKMS, including HSM appliances and PKI duties. You will implement automation, manage key lifecycles, and support secure provisioning across products within Woodward's industrial systems.

The role requires Linux, bash, Windows batch scripting, and strong English/Polish communication. Relocation support and hybrid work options are available.

Qualifications

• Solid PKI knowledge: X.509 certificates, CAs, CSRs, CRLs, and certificate lifecycle management.
• Experience with Hardware Security Modules (HSM) and TPM 2.0.
• Scripting in Python; Bash on Linux and Batch on Windows.
• Fluent English and Polish; strong teamwork.

Responsibilities

• Operate, administer, and maintain CKMS including HSM appliances and client support.
• Develop automation tooling (Python, Bash, PKCS#11/Cryptoki) for key operations.
• Manage cryptographic key lifecycle and secure provisioning to products.
• Administer X.509 certificates; support PKI/root-of-trust operations.
• Contribute to CKMS network architecture and configuration.
• Support SDLC security processes per ISA/IEC 62443-4-1 and audits.

Tools

PKCS#11 / Cryptoki

HSM familiarity

TPM 2.0

Job description

The Cybersecurity Engineer – Cryptography & Key Management will be primarily responsible for operating, maintaining, and expanding our Cryptographic Key Management System (CKMS) — an HSM‑backed platform used to securely generate, store, and use cryptographic keys for code signing, digital signatures, and roots‑of‑trust across our products.Second part of the work covers broader product cybersecurity functions within Woodward business unit(s) as described in the Secure Development Lifecycle (SDLC), including risk assessment, awareness/training, incident response, and strategic initiatives. This member also advises developers, test engineers, and supply chain resources on product cybersecurity issues.Join our Industrial Systems Team as a Cybersecurity Engineer – Cryptography & Key Management!What Will You Do:Operate, administer, and maintain the CKMS, including the HSM appliances and support of client systemsServe as resource to collaborate on CKMS crypto needs, methods, and deployment for new products and projectsManage the cryptographic key lifecycle for products (generation, storage, distribution, rotation, backup, revocation) and support secure key provisioning to productsAdminister X.509 certificates and support PKI / root-of-trust operationsDevelop automation and tooling (Python, bash, PKCS#11 / Cryptoki) to streamline key operations and integrationsContribute to CKMS networking architecture and configuration of CKMS equipment and clientsOversee implementation of the Secure Development Lifecycle based on ISA/IEC 62443-4-1, and support product certification and internal pre-certification auditsIdentify and analyze cybersecurity risks and define appropriate risk treatmentManage security requirements: derive requirements from multiple standards, produce deliverable reports, and review hardware and software requirementsProvide product cybersecurity input into proposals and risk assessments, support new cyber tools, and help train members on relevant regulations/standardsQualifications:Solid PKI knowledge: X.509 certificates, CAs, CSRs, CRLs, and certificate lifecycle managementUnderstanding of cryptographic key applications — code signing, digital signatures, roots-of-trust, and key-exchange methodsFamiliarity with Hardware Security Modules and TPM 2.0Comfortable working in Linux and scripting in bash, working in Windows and scripting in batch files, Python scriptingFamiliarity with embedded security concepts such as secure boot, firmware signing, and secure key provisioningKnowledge of IEC 62443 and the EU Cyber Resilience Act (CRA) as a plus, and ability to identify and analyze security risksExperience creating cybersecurity process documents (procedures, manuals, instructions)Strong teamwork approach; fluent English and Polish in writing and speakingWhat Will You Gain:Salary range from 14 000 to 22 500 PLN gross – depending on experienceAdvancement opportunities in an international teamA total rewards package that includes: private health insurance, life & accidental insuranceMultisport packageMeal VouchersCompany performance bonus programWork‑life balance, semi‑flexible working timeRemuneration structure based on creative works (Autorskie Koszty Uzyskania Przychodu / KUP 50%)PPK: Woodward offers payment to your PPK account up to 4% of your compensation depending on seniorityHybrid work modelRelocation & Educational Support