Senior Cloud Cryptography Automation Engineer

Euroclear; Kraków; On-site; PLN 180,000 - 300,000; Full time

Job summary

Euroclear is seeking an experienced engineer to design, automate, and operate cryptographic and certificate management capabilities across hybrid infrastructure (Windows, Linux, Azure).

You will build resilient PKI, crypto services, and automation pipelines that scale, partner with engineering teams, and support production systems with a strong focus on security and reliability.

Qualifications

• Bachelor’s degree in Computer Science or equivalent experience.
• Strong experience with cloud security and PKI implementations.
• Proven ability to design automations and IaC for cryptography environments.

Responsibilities

• Design, implement, and automate cryptographic services, PKI infrastructures, and certificate lifecycle management across cloud and on‑prem platforms.
• Build secure automation and Infrastructure-as-Code pipelines to support internal PKI and crypto services.
• Partner with internal engineering teams to advise, design, and integrate cryptographic solutions.
• Troubleshoot and resolve production issues related to cryptography and certificate services.
• Participate in a Watch Duty rotation (approx. 1 day/week).

Skills

Azure Key Vault

HSM integration

Secret lifecycle

Terraform

Ansible

CI/CD pipelines

PKI

Certificate management

CMS

SCEP

ACME

SAML

TLS

Python

PowerShell

Java

Networking basics

ETW

strace

tcpdump

wireshark

Education

Bachelor’s degree in CS or related field

Tools

Azure

Linux

Windows

Job description

Job Description

We are looking for an experienced engineer to design, automate, and operate Euroclear’s cryptographic and certificate management capabilities across a large-scale, mission-critical environment. You will play a key role in securing our hybrid infrastructure (Windows, Linux, Azure cloud-native services) by building resilient PKI, crypto services, and automation pipelines that scale.

Your role

• Design, implement, and automate cryptographic services, PKI infrastructures, and certificate lifecycle management across cloud and on-prem platforms.
• Build secure automation and Infrastructure-as-Code pipelines to support our internal PKI and crypto services.
• Partner with internal engineering teams to advise, design, and integrate cryptographic solutions aligned with Euroclear standards.
• Troubleshoot and resolve production issues related to cryptography and certificate services.
• Participate in a Watch Duty rotation (approx. 1 day/week) to ensure operational continuity of critical crypto systems.

Mandatory Technical Skills

• Strong experience with Azure security services, especially Key Vault, HSM integration, and secret/key lifecycle management.
• High proficiency in Terraform, Ansible, and automated configuration/deployment workflows.
• Deep understanding of PKI, certificate management, and modern cryptography (X.509, elliptic curve, key exchange, signing & encryption standards).
• Hands-on experience implementing or integrating cryptographic protocols: CMS, SCEP, ACME, SAML, TLS, etc.
• Proficiency in automation and scripting (Python required; PowerShell and Java are assets).
• Solid understanding of networking and security fundamentals.
• Experience debugging at system level on Windows/Linux (ETW, strace, tcpdump, wireshark, etc.).

Nice to Have

• Experience with large, regulated, mission-critical environments.
• Knowledge of cloud-native identity and access patterns beyond PKI.
• Contributions to security automation frameworks or internal tooling.

Soft Skills

• Strong communication skills in English (C1+).
• Ability to collaborate effectively with engineering, architecture, and security teams.
• Proactive problem solver with a structured approach.
• High level of ownership and accountability.
• Ability to identify risks, propose solutions, and challenge the status quo.
• Bachelor’s Degree in Computer Science or equivalent experience.

About Us

Why join us

Embark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.

What We Offer

• Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries.
• Practice your talents in a highly professional international environment.
• Join a learning and development environment with an emphasis on knowledge sharing and training.
• Competitive salary and comprehensive benefits.

Ways of working

Find your own optimal balance within our hybrid working model, where you can connect at the office 8 days a month and also benefit from remote working.

Great Place to Work for All

We are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, ...). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process.

Our values guide how we work together and shape our future: Our mission and values - Euroclear