PKI & Cryptography Security Engineer (On-Call)

Freddie Mac; McLean (VA); On-site; USD 97,000 - 145,000; Full time

Job summary

Freddie Mac is seeking a Cyber Security Professional focused on Cryptography/PKI to join the Data Protection team within the Information Security Engineering group. The role involves administration and operations support of Data Protection tools, with an on-call requirement to safeguard confidentiality, integrity, and availability across information systems.

You will install, configure, and patch security software on Windows and Unix servers, monitor systems, and contribute to runbooks and SOPs.

Qualifications

• 2+ years IT security experience on Linux and Windows platforms.
• Experience with Data Protection technologies and security tools administration.
• Familiarity with cryptography, PKI, data tokenization, and data masking.
• Comfortable with scripting languages (Python, Bash, PowerShell) and automation tools like Ansible.

Responsibilities

• Install, configure and troubleshoot Data Protection software and agents on Windows and Unix servers.
• Apply patches and upgrades to clients and administrative tools.
• Monitor integrity and availability of appliances, servers, and processes; review logs and ensure services run as expected.
• Develop SOPs and Runbooks; provide 24/7 coverage support as needed.
• Coordinate with other teams to deploy new policies/assets and resolve tooling issues.

Skills

Cryptography/PKI

Scripting (Python)

PowerShell

Ansible

GIT

Tools

JSON

XML

YAML

Linux

Windows

Job description

Freddie Mac is seeking a Cyber Security Professional focused on Cryptography/PKI to join the Data Protection team within the Information Security Engineering group. The role involves administration and operations support of Data Protection tools, with an on-call requirement to safeguard confidentiality, integrity, and availability across information systems.

You will install, configure, and patch security software on Windows and Unix servers, monitor systems, and contribute to runbooks and SOPs.