Cryptography Engineer

About the role

The role supports the design, implementation, and daily operations of cryptographic key management processes, ensuring keys and cryptographic systems are securely maintained, compliant with standards, and aligned with organizational security requirements.

Key responsibilities

• Manage and maintain key management systems such as HSMs, key vaults, and cloud KMS.
• Support the implementation of the enterprise key management strategy and follow policies for the full key lifecycle (generation, storage, rotation, revocation).
• Ensure encryption and signing services are correctly integrated with applications and infrastructure.
• Prepare documentation and assist in audits to demonstrate compliance with standards such as NIST, ISO, PCI‑DSS, and FIPS.
• Monitor key management systems, report anomalies, and investigate key‑related incidents.
• Collaborate with engineering, DevOps, and infrastructure teams to embed cryptographic controls.

Required profile

• 3‑5 years of experience in cryptographic key management, security architecture, or related fields.
• Proven experience leading cryptographic key lifecycle projects and delivering secure solutions at scale.
• Relevant tertiary qualification and industry certifications (e.g., CISSP, CISM, CKA, CCSP).
• Strong communication and stakeholder management skills.

Required skills

• Cryptographic algorithms: AES, RSA, ECC.
• Hardware Security Modules (HSMs) and Public Key Infrastructure (PKI).
• Key vaults and cloud key management services (e.g., AWS KMS, Azure Key Vault).
• Encryption tooling and secure key storage solutions.
• Familiarity with security standards and compliance frameworks such as NIST, ISO, PCI‑DSS, and FIPS.