Senior Cryptography & Key Management Engineer

TEKsystems; Denver (CO); On-site; USD 103,000 - 110,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Life Insurance

Disability benefits

HSA

Transportation benefits

Employee Assistance Program

PTO / Vacation

Job summary

TEKsystems is seeking a Security Engineer specialized in cryptography and enterprise key management for a Denver-based contract role. You will design, deploy, and support cryptographic services, including HSM and KMS, and collaborate with cloud and security teams to enforce data protection controls.

The position emphasizes hands-on work with cryptographic APIs, KMIP, PKCS#11, and automation using PowerShell and Python, in Windows and Linux environments. On-site work with competitive hourly pay.

Qualifications

• Experience with enterprise key management, encryption, and cryptographic infra.
• Hands-on with HSM technologies and KMIP/PKCS#11 APIs.
• Linux and Windows administration with automation skills.
• Familiarity with cloud security and containerized environments.

Responsibilities

• Design, implement, and support cryptographic services and key management platforms.
• Administer and maintain HSM and KMS solutions, including key lifecycle.
• Implement encryption, tokenization, and data protection controls.
• Collaborate with application, cloud, and security teams on cryptographic requirements.
• Automate operations using PowerShell and Python.
• Support platform upgrades, patching, and compliance initiatives.
• Contribute to cloud-native security and Zero Trust initiatives.

Skills

Cryptography

HSM

KMS

Automation

Cloud security

Compliance

Python

PowerShell

Tools

Thales Luna

CloudHSM

CipherTrust

PKCS#11

Job description

TEKsystems is seeking a Security Engineer specialized in cryptography and enterprise key management for a Denver-based contract role. You will design, deploy, and support cryptographic services, including HSM and KMS, and collaborate with cloud and security teams to enforce data protection controls.

The position emphasizes hands-on work with cryptographic APIs, KMIP, PKCS#11, and automation using PowerShell and Python, in Windows and Linux environments. On-site work with competitive hourly pay.