Key Responsibilities
- Serve as a technical SME for Thales CipherTrust Key Manager and CipherTrust Transparent Encryption.
- Design, implement, administer, and support enterprise encryption and key management solutions.
- Troubleshoot complex CipherTrust, encryption, operating system, and security appliance issues.
- Support Linux, Unix, and Windows environments, including OS hardening, tuning, troubleshooting, and application support.
- Perform administration and support of Hardware Security Modules (HSMs) and other security appliances.
- Develop and maintain automation and scripting solutions using Python, Bash, PowerShell, Ansible, or similar technologies.
- Support infrastructure upgrades, security patches, firmware upgrades, and version upgrades for CipherTrust, HSMs, and related security infrastructure.
- Participate in implementation planning, testing, deployment, and operational readiness for technology upgrades.
- Support change management, incident management, and problem resolution within a large enterprise environment.
- Apply knowledge of cryptographic protocols, algorithms, encryption technologies, and key management practices.
- Work with technologies including format-preserving encryption (FPE), tokenization, and transparent data encryption (TDE).
- Develop implementation plans and technical standards for security technologies.
- Partner with engineering, infrastructure, operations, cybersecurity, and other technology teams to deliver secure and resilient solutions.
- Create technical documentation, procedures, and knowledge-transfer materials.
- Mentor and guide less experienced engineers and help establish engineering best practices.
- Coordinate multiple technical initiatives while meeting aggressive delivery timelines.
- Participate in Agile methodologies, including Scrum and Kanban.
Required Qualifications
- 5+ years of experience in Information Security Engineering or equivalent combination of work experience, training, military experience, or education.
- 5+ years of hands-on experience with Thales CipherTrust Key Manager (CTKM) and CipherTrust Transparent Encryption (CTE).
- 5+ years of experience with scripting and automation using technologies such as Python, Bash, PowerShell, Ansible, VBScript, JavaScript, or UiPath.
- 5+ years of Unix/Linux/Windows Systems Administration experience.
- Strong experience with OS troubleshooting, hardening, and performance tuning.
- 5+ years of experience with encryption and/or tokenization technologies.
- 3+ years of experience building, administering, or supporting Hardware Security Modules (HSMs) or security appliance devices.
- Advanced knowledge of cryptographic protocols and algorithms.
- Strong understanding of cryptographic technologies and enterprise key management.
- Experience with FPE, tokenization, and TDE.
- Experience implementing infrastructure upgrades, security patches, firmware upgrades, and software/version upgrades.
- Experience supporting applications in Linux and Windows server environments.
- Experience with enterprise change and incident management practices.
- Experience working within Agile Scrum or Kanban environments.
Desired Qualifications
- Experience working in large, complex, and highly regulated enterprise technology or information security environments.
- Experience conducting technical product assessments and developing implementation plans.
- Experience mentoring and developing less experienced engineers.
- Strong analytical, problem-solving, and troubleshooting skills.
- High attention to detail and accuracy.
- Security certifications such as CISSP, GIAC, or equivalent.
- Cloud certifications such as AZ-900, MS-900, or equivalent/higher.
- Experience with Ansible, Puppet, Chef, or similar automation technologies.
- Experience designing and implementing synthetic transactions for application or infrastructure monitoring.
- Knowledge of the banking or financial services industry.
- Strong ability to coordinate multiple priorities and deliver within aggressive timelines.
Skills: linux,infosec,ciphertrust,infrastructure,ansible,hsms,automation,key management,security,encryption,management,enterprise