Cloud Security Engineer – Cryptography

Astyra Corporation; McLean (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Astyra Corporation is seeking an experienced Cloud Security Engineer to design, implement, and govern cryptographic security solutions across cloud and on-premises environments. The role emphasizes hands-on work with HSMs, certificate management, and secrets management in AWS, Azure, and GCP.

The ideal candidate has 4+ years in cybersecurity, cryptography, and cloud-native tech, plus experience with Futurex, Thales HSMs, Venafi, DigiCert, Vault, and Cortex XSOAR.

Qualifications

• 4+ years of Cyber Security experience.
• 2+ years of cryptography experience.
• 2+ years of cloud-native technologies such as AWS, Azure, or Google Cloud Platform.
• 2+ years of Unix or Linux system administration experience.
• 2+ years of experience with Futurex and Thales HSMs.
• 2+ years of experience with Venafi and DigiCert, or comparable certificate lifecycle management solutions.
• 2+ years of experience with HashiCorp Vault or comparable secrets management solutions.
• 1+ year of experience with Cortex XSOAR.

Responsibilities

• Design and implement enterprise cryptographic solutions to protect sensitive data across cloud and on-premises environments.
• Develop and support solutions involving encryption, hashing, digital signatures, key management, certificate management, and secrets management.
• Manage and integrate Futurex and Thales Hardware Security Modules (HSMs) within enterprise environments.
• Support certificate lifecycle management using Venafi, DigiCert, or similar PKI/certificate management platforms.
• Implement and support enterprise secrets management solutions using HashiCorp Vault or comparable technologies.
• Support security automation and orchestration using Cortex XSOAR.
• Assess cybersecurity risks related to data confidentiality and integrity, including cryptographic vulnerabilities and emerging threats.
• Collaborate with cybersecurity product managers, architects, and engineering teams to design scalable cloud-based security solutions.
• Help mature enterprise cryptography governance through policies, standards, technical guidelines, and security controls.
• Support cloud-native environments across AWS, Azure, and/or Google Cloud Platform.
• Participate in technical design, troubleshooting, scripting, code reviews, and implementation activities.
• Stay current with emerging cybersecurity, cryptography, and cloud technologies and contribute to engineering best practices.

Skills

Cryptography

Cloud security

Governance

Scripting

Education

High School Diploma

Bachelor’s degree

Tools

Futurex

Thales HSM

Venafi

DigiCert

HashiCorp Vault

Cortex XSOAR

Job description

Role Overview

We are seeking an experienced Cloud Security Engineer with a strong background in cryptography, cloud security, and enterprise key and certificate management. This role will support the design, implementation, and governance of security solutions that protect sensitive data across cloud and enterprise environments.

The ideal candidate will have hands-on experience with Futurex and Thales HSMs, Venafi, DigiCert, HashiCorp Vault, and Cortex XSOAR, along with a solid understanding of cryptographic technologies and cloud-native security.

Key Responsibilities

• Design and implement enterprise cryptographic solutions to protect sensitive data across cloud and on-premises environments.
• Develop and support solutions involving encryption, hashing, digital signatures, key management, certificate management, and secrets management.
• Manage and integrate Futurex and Thales Hardware Security Modules (HSMs) within enterprise environments.
• Support certificate lifecycle management using Venafi, DigiCert, or similar PKI/certificate management platforms.
• Implement and support enterprise secrets management solutions using HashiCorp Vault or comparable technologies.
• Support security automation and orchestration using Cortex XSOAR.
• Assess cybersecurity risks related to data confidentiality and integrity, including cryptographic vulnerabilities and emerging threats.
• Collaborate with cybersecurity product managers, architects, and engineering teams to design scalable cloud-based security solutions.
• Help mature enterprise cryptography governance through policies, standards, technical guidelines, and security controls.
• Support cloud-native environments across AWS, Azure, and/or Google Cloud Platform.
• Participate in technical design, troubleshooting, scripting, code reviews, and implementation activities.
• Stay current with emerging cybersecurity, cryptography, and cloud technologies and contribute to engineering best practices.

Required Qualifications

• High School Diploma, GED, or equivalent certification.
• 4+ years of Cyber Security experience.
• 2+ years of experience with cryptography and cryptographic technologies.
• 2+ years of experience with cloud-native technologies such as AWS, Azure, or Google Cloud Platform.
• 2+ years of Unix or Linux system administration experience.
• 2+ years of experience with Futurex and Thales HSMs.
• 2+ years of experience with Venafi and DigiCert, or comparable certificate lifecycle management solutions.
• 2+ years of experience with HashiCorp Vault or comparable secrets management solutions.
• 1+ year of experience with Cortex XSOAR.

Preferred Qualifications

• Bachelor’s degree.
• 5+ years of Cyber Security Engineering experience.
• 2+ years of coding or scripting experience using technologies such as Python, SQL, Java, JavaScript, Golang, Bash, PowerShell, Perl, or Ruby.
• 4+ years of experience with security tools and frameworks such as SIEM, IDS/IPS, and vulnerability scanning technologies.
• 2+ years of experience working within Agile development environments.
• Experience designing or supporting enterprise PKI, key management, secrets management, or cryptographic infrastructure.