Lead Thales CipherTrust Security Engineer

PTR Global; Columbus (OH); On-site; USD 101,000 - 105,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K contributions

Paid time off

Job summary

PTR Global is seeking a Lead Thales CipherTrust Security Engineer to support large-scale encryption and key management initiatives in a Columbus, OH environment. The role emphasizes hands-on engineering, troubleshooting, and mentorship across Linux, Windows, and security appliances.

You will lead CipherTrust Key Manager and Transparent Encryption efforts, develop automation, and collaborate with cross-functional security teams to implement scalable, compliant solutions.

Qualifications

• Five+ years of information security engineering experience.
• Hands-on CipherTrust experience with Key Manager and Transparent Encryption.
• Automation experience using scripting and orchestration tools.
• Experience administering Linux/Windows systems in enterprise environments.
• Experience with encryption, tokenization, and HSMs.

Responsibilities

• Design, implement, and support CipherTrust environments.
• Lead CipherTrust-related engineering initiatives as SME.
• Troubleshoot encryption, key management, OS, app, and infra issues.
• Administer Linux/Unix/Windows servers, including hardening and patches.
• Develop automation using Bash, PowerShell, Python, Ansible, or similar.
• Lead testing, change management, and production support activities.
• Create technical documentation, standards, and best practices.
• Mentor junior engineers and coordinate deliverables in sprints.

Skills

Thales CipherTrust Key Manager

CipherTrust Transparent Encryption

Bash scripting

PowerShell

Python

Ansible

Unix/Linux administration

Windows administration

Encryption technologies

Security engineering

Tools

Puppet

Chef

Ansible

Job description

Position: Lead Thales CipherTrust Security Engineer

Location: Columbus, OH, Loyalty Circle, Chandler, AZ Charlotte, NC

Duration: 12+ months

Job ID: 180205

Position Overview

Our client is seeking a Senior Information Security Engineer with deep expertise in Thales CipherTrust, encryption, key management, and enterprise security engineering. This role will support complex, large-scale initiatives designed to protect sensitive enterprise data across Linux, Windows, applications, infrastructure, and security appliances.

Thales CipherTrust Key Manager and CipherTrust Transparent Encryption are the core technologies for the organization’s unstructured data encryption strategy. The selected engineer will serve as a technical subject matter expert, providing hands-on engineering, troubleshooting, upgrades, performance tuning, documentation, and mentorship to the broader team.

Key Responsibilities

• Design, implement, administer, and support Thales CipherTrust Key Manager and CipherTrust Transparent Encryption environments.
• Serve as a technical lead and subject matter expert for CipherTrust-related engineering initiatives.
• Troubleshoot complex encryption, key management, operating system, application, and infrastructure issues.
• Support Linux, Unix, and Windows server environments, including OS hardening, tuning, patching, and performance optimization.
• Build, configure, administer, and support hardware security modules and security appliance technologies.
• Develop and maintain automation using Bash, PowerShell, Python, Ansible, JavaScript, VBScript, UiPath, or similar tools.
• Support infrastructure, firmware, security patch, software version, and HSM upgrades.
• Lead testing activities, implementation planning, change management, incident management, and production support.
• Develop implementation stories, technical documentation, standards, operating procedures, and best practices.
• Support encryption, tokenization, format‑preserving encryption, transparent data encryption, and cryptographic key management initiatives.
• Collaborate with application, infrastructure, architecture, operations, and security teams.
• Mentor junior engineers and provide technical guidance to improve team capabilities and engineering maturity.
• Participate in Agile Scrum or Kanban ceremonies and coordinate multiple deliverables within aggressive timelines.
• Analyze complex information security challenges and recommend scalable, compliant, and sustainable solutions.

Required Qualifications

• Five or more years of Information Security Engineering experience, or equivalent experience through work, consulting, training, military service, or education.
• Five or more years of hands‑on experience with Thales CipherTrust Key Manager and CipherTrust Transparent Encryption.
• Five or more years of experience with scripting or automation using Bash, PowerShell, Python, Ansible, VBScript, JavaScript, UiPath, or similar technologies.
• Five or more years of Unix, Linux, or Windows systems administration experience.
• Strong experience with OS troubleshooting, hardening, tuning, and performance optimization.
• Five or more years of experience with encryption or tokenization technologies.
• Three or more years of experience building, administering, or supporting hardware security modules or security appliance devices.
• Advanced knowledge of cryptographic protocols and algorithms.
• Strong understanding of cryptographic technologies and enterprise key management.
• Knowledge of format‑preserving encryption, tokenization, and transparent data encryption.
• Experience supporting application environments on Linux and Windows servers.
• Experience implementing infrastructure upgrades, security patches, and version upgrades for systems, appliances, and HSMs.
• Experience with change management and incident management in medium- to large-enterprise environments.
• Experience working with Agile Scrum or Kanban methodologies.
• Strong analytical, problem‑solving, troubleshooting, and communication skills.

Preferred Qualifications

• Experience working in a complex, fast-paced information security or technology organization.
• Experience conducting technical product assessments and developing implementation plans.
• Experience mentoring or guiding junior engineers.
• Experience with Puppet, Chef, Ansible, or comparable automation tools.
• Experience designing and implementing synthetic transactions for application or infrastructure monitoring.
• CISSP, GIAC, or comparable security certification.
• Cloud certifications such as AZ-900, MS-900, or higher‑level equivalents.
• Knowledge of banking or financial services environments.
• Ability to coordinate multiple priorities and deliver high-quality results under aggressive deadlines.
• Demonstrated ability to create technical standards, documentation, and repeatable engineering practices.

Pay Range

Pay Range: $73 – $76 on W2

Benefits

The specific compensation for this position will be determined by a number of factors, including the scope, complexity and location of the role as well as the cost of labor in the market; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits including medical, dental, vision and 401K contributions as well as any other PTO, sick leave, and other benefits mandated by appliable state or localities where you reside or work.

LI-AK7