Cybersecurity Engineer – Cryptography & Key Management (f/m)

Woodward, Inc.; Poland; Remote; PLN 156,000 - 251,000; Full time

Benefits offered by this job

Private health insurance

Life & accidental insurance

Multisport package

Meal Vouchers

Company performance bonus

Job summary

Woodward, Inc. in Niepolomice, Poland is seeking a Cybersecurity Engineer focusing on Cryptography & Key Management to operate the CKMS and support HSM-backed security for code signing and roots-of-trust.

The role covers broader Secure Development Lifecycle tasks, risk assessments, and training for teams, with hybrid/ flexible arrangements and a competitive package.

Qualifications

• Solid PKI knowledge including X.509, CAs, CSRs, and certificate lifecycle.
• Experience with scripting in Python and Bash for automation.
• Comfortable working with Linux and Windows environments.

Responsibilities

• Operate, administer, and maintain the CKMS, including HSM appliances and client support.
• Manage cryptographic key lifecycle: generation, storage, rotation, backup, revocation.
• Administer X.509 certificates and PKI/root-of-trust operations.
• Develop automation tooling (Python, Bash, PKCS#11) to streamline key operations.
• Contribute to CKMS network architecture and client configuration.
• Support the Secure Development Lifecycle per ISA/IEC 62443-4-1 and audits.
• Identify cybersecurity risks and derive appropriate treatments.

Skills

PKI knowledge

Scripting (Python, Bash)

Linux

Windows batch scripting

Tools

HSM

TPM 2.0

PKCS#11

Job description

## Cybersecurity Engineer – Cryptography & Key Management (f/m)Apply: Niepolomice, PL: Full time: Posted Today: JR113102The **Cybersecurity Engineer – Cryptography & Key Management** will be primarily responsible for operating, maintaining, and expanding our **Cryptographic Key Management System (CKMS)** — an HSM‐backed platform used to securely generate, store, and use cryptographic keys for code signing, digital signatures, and roots‐of‐trust across our products.Second part of the work covers broader product cybersecurity functions within Woodward business unit(s) as described in the Secure Development Lifecycle (SDLC), including risk assessment, awareness/training, incident response, and strategic initiatives. This member also advises developers, test engineers, and supply chain resources on product cybersecurity issues.Join our **Industrial Systems** Team as a **Cybersecurity Engineer – Cryptography & Key Management!****What Will You Do:*** Operate, administer, and maintain the CKMS, including the HSM appliances and support of client systems* Serve as resource to collaborate on CKMS crypto needs, methods, and deployment for new products and projects* Manage the cryptographic key lifecycle for products (generation, storage, distribution, rotation, backup, revocation) and support secure key provisioning to products* Administer X.509 certificates and support PKI / root-of-trust operations* Develop automation and tooling (Python, bash, PKCS#11 / Cryptoki) to streamline key operations and integrations* Contribute to CKMS networking architecture and configuration of CKMS equipment and clients* Oversee implementation of the Secure Development Lifecycle based on ISA/IEC 62443-4-1, and support product certification and internal pre-certification audits* Identify and analyze cybersecurity risks and define appropriate risk treatment* Manage security requirements: derive requirements from multiple standards, produce deliverable reports, and review hardware and software requirements* Provide product cybersecurity input into proposals and risk assessments, support new cyber tools, and help train members on relevant regulations/standards**Qualifications:*** Solid PKI knowledge: X.509 certificates, CAs, CSRs, CRLs, and certificate lifecycle management* Understanding of cryptographic key applications — code signing, digital signatures, roots-of-trust, and key-exchange methods* Familiarity with Hardware Security Modules and TPM 2.0* Comfortable working in Linux and scripting in bash, working in Windows and scripting in batch files, Python scripting* Familiarity with embedded security concepts such as secure boot, firmware signing, and secure key provisioning* Knowledge of IEC 62443 and the EU Cyber Resilience Act (CRA) as a plus, and ability to identify and analyze security risks* Experience creating cybersecurity process documents (procedures, manuals, instructions)* Strong teamwork approach; fluent English and Polish in writing and speaking**What Will You Gain:*** Salary range from 14 000 to 22 500 PLN gross – depending on experience* Advancement opportunities in an international team* A total rewards package that includes: private health insurance, life & accidental insurance* Multisport package* Meal Vouchers* Company performance bonus program* Work‐life balance, semi‐flexible working time* Remuneration structure based on creative works (Autorskie Koszty Uzyskania Przychodu / KUP 50%)* PPK: Woodward offers payment to your PPK account up to 4% of your compensation depending on seniority* Hybrid work model* Relocation & Educational Support