Key Management and Cryptographic Security Engineer

Key Management & Cryptographic Security Engineer

Role Summary
We are seeking an experienced Key Management & Cryptographic Security Engineer to manage and support enterprise cryptographic security environments, including key management, HSMs, PKI/certificates, encryption and secure device provisioning. The role covers the full cryptographic key lifecycle, controlled key ceremonies, security compliance, production support and troubleshooting across multiple environments.

Key Responsibilities & Skills

• Manage the complete cryptographic key lifecycle including generation, distribution, activation, rotation, renewal, revocation, backup, recovery and secure destruction.
• Administer and support Hardware Security Modules (HSMs), enterprise KMS, SAMs and associated cryptographic services.
• Manage PKI, digital certificates, Certificate Authorities, certificate chains, public/private keys and digital signatures.
• Strong knowledge of symmetric cryptography including AES, DES/3DES, DUKPT, MACs, hashing, key derivation/diversification, key wrapping and key exchange.
• Good understanding of TLS/mTLS, asymmetric cryptography and cryptographic key-management lifecycles, including relevant NIST guidance.
• Support controlled key ceremonies, key injection and secure device-provisioning activities.
• Troubleshoot encryption, certificate, secure-messaging, key-injection and HSM-related production issues and perform root-cause analysis.
• Assess the end-to-end security and operational impact of key, certificate, device and cryptographic configuration changes.
• Maintain accurate key inventories, configurations, runbooks, technical documentation and audit evidence.
• Knowledge of payment security concepts such as BDKs, KSNs, KEKs, Terminal Master Keys, PIN cryptography and key blocks is desirable.
• Experience with contactless smartcards, secure elements, embedded security or secure credential technologies is advantageous.
• Familiarity with standards such as PCI PTS POI, PCI P2PE, PCI Mobile Payments on COTS and ISO/IEC 27000 is beneficial.
• Scripting or automation experience for monitoring, validation, reporting and controlled security operations is preferred.
• Degree in Cybersecurity, Computer Science, Electronics, Engineering or equivalent professional experience; CISSP, CCSP, Security+, ISO 27001, PCI or HSM/KMS certifications are advantageous.

If Interested please mail your resume to [email removed]