Information Security Engineer

Staffing Spot, Inc.; Phoenix (AZ); On-site; USD 120,000 - 150,000; Full time

Job summary

Staffing Spot, Inc. is seeking an InfoSec Engineer to design, implement, and manage Thales CipherTrust security solutions across on-premise and cloud workloads.

You will handle CipherTrust Manager, DSP, and CTE, plus key lifecycle, access controls, and integration with enterprise apps. The role requires 5+ years in information security, hands-on CipherTrust experience, Linux/Windows, scripting, and strong PKI knowledge.

Qualifications

• 5+ years in information security or security engineering.
• 3+ years with Thales CipherTrust or similar encryption platforms.
• Strong experience with CipherTrust Manager and CipherTrust Transparent Encryption (CTE).
• Solid understanding of encryption concepts, PKI, and key management.
• Experience with Linux and Windows environments, and scripting.

Responsibilities

• Design, implement, configure, and administer CipherTrust security solutions.
• Manage CipherTrust Manager, Data Security Platform, and related components.
• Configure encryption keys, lifecycle management, rotation, and recovery.
• Implement centralized key management for databases, apps, files, and cloud workloads.
• Protect data at rest with CTE policies and manage access controls.
• Integrate CipherTrust with enterprise applications, databases, and cloud platforms.
• Monitor infrastructure, troubleshoot security events, and resolve crypto issues.
• Participate in incident response and disaster recovery planning.
• Develop technical documentation and runbooks; mentor junior engineers.

Skills

Information security

Security engineering

Analytical skills

Mentorship

Scripting

Tools

CipherTrust Manager

CipherTrust Data Security Platform

CipherTrust Transparent Encryption

Python

PowerShell

Bash

REST APIs

Job description

CipherTrust InfoSec Engineer

• Design, implement, configure, and administer Thales CipherTrust security solutions.
• Manage CipherTrust Manager, CipherTrust Data Security Platform, and related security components.
• Configure and manage encryption keys, key lifecycle management, rotation, archival, backup, and recovery.
• Implement centralized key management and encryption solutions for databases, applications, file systems, and cloud workloads.
• Configure and manage CipherTrust Transparent Encryption (CTE) policies and protect sensitive data at rest.
• Manage access controls, user roles, authentication, and authorization within CipherTrust environments.
• Integrate CipherTrust with enterprise applications, databases, cloud platforms, and security infrastructure.
• Implement and maintain encryption and key-management standards in accordance with organizational security policies.
• Monitor CipherTrust infrastructure, troubleshoot security events, and resolve encryption/key-management issues.
• Perform security assessments, vulnerability remediation, configuration reviews, and compliance audits.
• Support integration with SIEM, IAM, PAM, PKI, HSM, and other enterprise security technologies.
• Automate routine security and key-management activities using scripting and APIs.
• Develop and maintain technical documentation, architecture diagrams, procedures, and operational runbooks.
• Participate in incident response activities involving encryption, key management, data protection, and access control.
• Support disaster recovery, high availability, backup, and business continuity requirements for CipherTrust infrastructure.
• Collaborate with security architects and engineering teams to develop enterprise data protection solutions.
• Ensure solutions comply with security frameworks and regulatory requirements such as PCI DSS, HIPAA, SOX, GDPR, and NIST where applicable.
• Provide technical guidance and mentorship to junior security engineers.

Key Responsibilities

• Design, implement, configure, and administer Thales CipherTrust security solutions.
• Manage CipherTrust Manager, CipherTrust Data Security Platform, and related security components.
• Configure and manage encryption keys, key lifecycle management, rotation, archival, backup, and recovery.
• Implement centralized key management and encryption solutions for databases, applications, file systems, and cloud workloads.
• Configure and manage CipherTrust Transparent Encryption (CTE) policies and protect sensitive data at rest.
• Manage access controls, user roles, authentication, and authorization within CipherTrust environments.
• Integrate CipherTrust with enterprise applications, databases, cloud platforms, and security infrastructure.
• Implement and maintain encryption and key-management standards in accordance with organizational security policies.
• Monitor CipherTrust infrastructure, troubleshoot security events, and resolve encryption/key-management issues.
• Perform security assessments, vulnerability remediation, configuration reviews, and compliance audits.
• Support integration with SIEM, IAM, PAM, PKI, HSM, and other enterprise security technologies.
• Automate routine security and key-management activities using scripting and APIs.
• Develop and maintain technical documentation, architecture diagrams, procedures, and operational runbooks.
• Participate in incident response activities involving encryption, key management, data protection, and access control.
• Support disaster recovery, high availability, backup, and business continuity requirements for CipherTrust infrastructure.
• Collaborate with security architects and engineering teams to develop enterprise data protection solutions.
• Ensure solutions comply with security frameworks and regulatory requirements such as PCI DSS, HIPAA, SOX, GDPR, and NIST where applicable.
• Provide technical guidance and mentorship to junior security engineers.

Required Qualifications

• 5+ years of experience in Information Security, Cybersecurity, Data Security, or Security Engineering.
• 3+ years of hands-on experience with Thales CipherTrust or related enterprise encryption/key-management platforms.
• Strong experience with CipherTrust Manager and CipherTrust Transparent Encryption (CTE).
• Strong understanding of encryption concepts, cryptographic algorithms, key management, and PKI.
• Experience managing encryption keys throughout their lifecycle.
• Hands-on experience with Linux and Windows environments.
• Strong knowledge of networking concepts including TCP/IP, DNS, TLS/SSL, firewalls, and load balancing.
• Experience with REST APIs and scripting using Python, PowerShell, or Bash.
• Experience integrating security platforms with enterprise applications and infrastructure.
• Understanding of IAM, RBAC, privileged access management, and authentication mechanisms.
• Strong troubleshooting and analytical skills.
• Experience with security monitoring and incident response processes.

Skills: security,infrastructure,data,ciphertrust,encryption,management,key management