Cybersecurity Engineer

GDH; New York (NY); Hybrid; USD 83,000 - 110,000; Full time

Job summary

GDH is seeking a cryptography infrastructure engineer to design, implement, and manage cryptographic systems and key management platforms. You will collaborate with cybersecurity, risk, compliance, and technology teams to ensure secure, reliable operations.

The role emphasizes automation, documentation, and integrating cryptographic services with enterprise applications using KMIP and PKCS#11, while ensuring compliance with security standards.

Qualifications

• 6+ years of experience in cybersecurity, security engineering, cryptography, or related field.
• Experience with cryptographic infrastructure and key management technologies such as CipherTrust Manager, Luna HSMs, or comparable platforms.
• Experience integrating cryptographic services with enterprise applications using KMIP, PKCS#11, or similar protocols.

Responsibilities

• Build, maintain, and support cryptographic infrastructure, including HSMs and key management platforms.
• Manage encryption key lifecycle activities including generation, rotation, archival, and destruction.
• Integrate cryptographic services with enterprise applications using KMIP and PKCS#11.
• Troubleshoot and resolve issues involving cryptographic systems and vault technologies.
• Collaborate with security, risk, compliance, and technology teams on regulatory requirements.

Skills

Cryptography

Automation scripting

Linux

Analytical thinking

Communication

Education

Relevant education, training, certifications, or equivalent practical experience

Tools

CipherTrust Manager

Luna HSMs

KMIP

PKCS#11

PowerShell

Python

Job description

Role Summary

This position designs, implements, and manages cryptographic infrastructure to protect sensitive data and transactions. The role focuses on cryptographic systems, encryption key lifecycle management, automation, and integration while collaborating with cybersecurity, risk, compliance, and technology teams to support secure and reliable operations.

Responsibilities

• Build, maintain, and support cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.
• Manage encryption key lifecycle activities, including generation, rotation, archival, and destruction in accordance with established security standards.
• Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.
• Troubleshoot and resolve complex issues involving cryptographic systems, key management platforms, and vault technologies.
• Collaborate with cybersecurity, risk, compliance, and technology teams to support applicable security and regulatory requirements.
• Develop automation and process improvements for certificate and key management workflows.
• Develop and maintain technical documentation, FAQs, procedures, and operational support materials.
• Collaborate with technical teams and leadership on cybersecurity and cryptographic initiatives.
• Contribute technical expertise to complex cybersecurity engineering projects.
• Support security, risk, and compliance initiatives through effective management of cryptographic technologies and controls.

Qualifications

• 6+ years of relevant experience in cybersecurity, security engineering, cryptography, or a related field.
• Strong knowledge of encryption key lifecycle management, including generation, rotation, archival, and destruction.
• Experience supporting cryptographic infrastructure and key management technologies such as CipherTrust Manager, Luna Hardware Security Modules, or comparable platforms.
• Experience integrating cryptographic services with enterprise applications using KMIP, PKCS#11, or similar protocols.
• Proficiency with automation and scripting technologies such as PowerShell or Python.
• Experience working with Linux, Unix, or similar operating systems.
• Familiarity with observability and monitoring tools such as Prometheus and Grafana.
• Knowledge of security, risk, and regulatory requirements related to cryptographic infrastructure.
• Strong analytical and problem-solving skills with the ability to develop and communicate effective technical solutions.
• Strong written and verbal communication skills with the ability to communicate technical information to diverse audiences.
• Relevant education, training, certifications, or equivalent practical experience.

Publishing Pay Range:

$60.00 – $80.00 hourly

This position offers a hybrid schedule, with time split between the office and remote work.