Security Engineer- Ciphertrust

Mindlance; Chandler (AZ); Hybrid; USD 140,000 - 170,000; Full time

Job summary

Mindlance is seeking a hands-on security engineer specializing in Thales CipherTrust to design, deploy, and optimize encryption and key management across Linux and Windows environments. You will act as a lead SME, troubleshoot advanced CipherTrust features, and drive secure architecture in large-scale systems.

You will mentor junior team members, develop standards, and guide upgrade programs while collaborating with operations to ensure secure, scalable infrastructure.

Qualifications

• 5+ years of Information Security Engineering experience.
• 5+ years with Thales CipherTrust Key Manager and CipherTrust Transparent Encryption.
• 5+ years of Unix/Linux/Windows Systems Administration with OS hardening.
• 5+ years of encryption or tokenization technologies.
• 3+ years with hardware security modules or security appliances.
• Advanced knowledge of cryptographic protocols & algorithms.
• Knowledge of cryptographic technologies and key management.
• Understanding of FPE, tokenization and TDE.
• Upgrades, patches and version upgrades for systems and HSMs.
• Experience with Agile Scrum or Kanban.
• Experience with Linux and Windows server application support.
• Proven change and incident management in large enterprises.

Responsibilities

• Mentor junior engineers, share best practices, and raise team maturity.
• Lead testing, build implementation stories, and support upgrade projects.
• Train engineers on CipherTrust practices and security standards.
• Design, implement and secure encryption and key management architectures.

Skills

CipherTrust

CipherTrust Key Manager

CipherTrust Transparent Encryption

Linux/Windows administration

Encryption technologies

Cryptographic protocols

HSMs

OS hardening

Troubleshooting

Agile Scrum/Kanban

Change and incident management

Tools

Puppet/Chef/Ansible

Job description

Location: 3075 Loyalty Cir. – Columbus, OH

2600 S Price Rd – Chandler, AZ

1525 W W T Harris Blvd - Charlotte, NC

(Hybrid, 3 Days Onsite in office, 2 days remote)

Duration: 12+ months, possibility to extend or convert

Summary:

• Thales CipherTrust is the core platform supporting the team’s unstructured data encryption strategy, making it the most critical technical skill for this role and central to protecting sensitive enterprise data at scale.
• The initiative depends on hands‑on CipherTrust expertise, not just general encryption knowledge, because the selected engineer will need to understand advanced product features, troubleshoot complex issues, and serve as a lead SME for the team.
• CipherTrust Transparent Encryption requires strong OS‑level knowledge, since the product uses an agent installed at the operating system/kernel level; effective support requires Linux/Windows administration skills, debugging ability, hardening experience, and performance tuning.
• The role is important because the team has a capability gap and several junior engineers who need coaching, so this person will be expected to mentor others, create standards/documentation, guide best practices, and help raise the team’s overall maturity with Thales CipherTrust.
• Thales CipherTrust will be key to upcoming infrastructure and firmware upgrade work, with this role expected to lead testing, build implementation stories, support change/incident management, and train the rest of the engineers on the upgrade process.

Job Description:

Join a high‑impact security engineering team at the forefront of enterprise cryptography, where you’ll design, build, and scale critical encryption and key management solutions that protect some of the organization’s most sensitive data. This role is ideal for a hands‑on security engineer with deep expertise in cryptographic protocols, HSMs, and modern data protection technologies, who thrives in complex, large‑scale environments. You’ll work across Linux, Windows, and automation frameworks to harden systems, optimize performance, and drive secure architecture forward—while partnering with engineering and operations teams to deliver resilient, scalable solutions. If you’re passionate about encryption, key management, and solving sophisticated security challenges in a fast‑paced enterprise setting, this is a role where your expertise will directly shape the organization’s security posture.

This role will actively mentor and develop team members by providing technical guidance, sharing best practices, and fostering a culture of continuous learning and security excellence.

Required Qualifications:

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
• 5+ years of experience with Thales CipherTrust Key Manager and CipherTrust Transparent Encryption (CTE).
• 5+ years of Unix/Linux/Windows Systems Administration experience with in‑depth knowledge of troubleshooting, OS hardening and OS tuning.
• 5+ years of experience with encryption or tokenization technologies.
• 3+ years of experience performing builds, administration and/or support of hardware security modules or security appliance devices.
• Advanced Knowledge of Cryptographic protocols & algorithms.
• Knowledge and understanding of Cryptographic Technologies and Key Management
• Understanding of format preserving encryption (FPE), tokenization and transparent data encryption (TDE)
• Knowledge and understanding of implementing infrastructure upgrades, security patches, version upgrades for systems, appliances and HSM’s
• Experience with Agile Scrum or Kanban methodologies.
• Experience with application support in Linux and Windows server environments.
• Proven experience with change and incident management practices in medium to large enterprise environments.

Desired Qualifications:

• Experience with and the ability to thrive in a complex and fast‑paced technology and/or information security organization, within a large enterprise environment.
• Experience performing technical product assessments, including development of implementation plans, in a large enterprise.
• Experience mentoring/guiding less experienced staff.
• Strong analytical skills with high attention to detail and accuracy.
• Advanced critical thinking, problem solving and technical troubleshooting abilities.
• Security certifications such as CISSP, GIAC or equivalent.
• Cloud certifications such as AZ-900, MS-900 or equivalent/higher.
• Knowledge and understanding of implementing infrastructure upgrades, security patches, or version upgrades.
• Experience designing, developing and implementing synthetic transactions for the monitoring of applications and/or infrastructure.
• Experience with Puppet/Chef/Ansible or similar automation tools.
• Knowledge and understanding of banking or the financial services industry.
• Ability to coordinate completion of multiple tasks and meet aggressive time frames.

EEO:

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”