Cryptographic Infrastructure Engineer - Hybrid/Remote

GDH; New York (NY); Hybrid; USD 83,000 - 110,000; Full time

Job summary

GDH is seeking a cryptography infrastructure engineer to design, implement, and manage cryptographic systems and key management platforms. You will collaborate with cybersecurity, risk, compliance, and technology teams to ensure secure, reliable operations.

The role emphasizes automation, documentation, and integrating cryptographic services with enterprise applications using KMIP and PKCS#11, while ensuring compliance with security standards.

Qualifications

• 6+ years of experience in cybersecurity, security engineering, cryptography, or related field.
• Experience with cryptographic infrastructure and key management technologies such as CipherTrust Manager, Luna HSMs, or comparable platforms.
• Experience integrating cryptographic services with enterprise applications using KMIP, PKCS#11, or similar protocols.

Responsibilities

• Build, maintain, and support cryptographic infrastructure, including HSMs and key management platforms.
• Manage encryption key lifecycle activities including generation, rotation, archival, and destruction.
• Integrate cryptographic services with enterprise applications using KMIP and PKCS#11.
• Troubleshoot and resolve issues involving cryptographic systems and vault technologies.
• Collaborate with security, risk, compliance, and technology teams on regulatory requirements.

Skills

Cryptography

Automation scripting

Linux

Analytical thinking

Communication

Education

Relevant education, training, certifications, or equivalent practical experience

Tools

CipherTrust Manager

Luna HSMs

KMIP

PKCS#11

PowerShell

Python

Job description

GDH is seeking a cryptography infrastructure engineer to design, implement, and manage cryptographic systems and key management platforms. You will collaborate with cybersecurity, risk, compliance, and technology teams to ensure secure, reliable operations.

The role emphasizes automation, documentation, and integrating cryptographic services with enterprise applications using KMIP and PKCS#11, while ensuring compliance with security standards.