Cryptography Operations Team Lead US
HSBC is one of the largest banking and financial services organizations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.
About the role
As Cryptography Operations Team Lead, you’ll own US cryptography operations delivery and day-to-day management of cryptographic operations across HSBC platforms. The role is central to operational excellence for cryptography hardware and software, key and certificate lifecycle processes, and the controls that underpin compliance, resilience, and auditability.
You’ll oversee the cryptographic hardware used in our environments, including configuration, crypto-load, and installation into data centers and external hosting. The role directly supports cryptographic solutions being implemented to a standard aligned to the bank’s risk appetite. You’ll work across Security, Engineering, and Governance and Controls teams to ensure consistent outcomes and evidence for audit. The new Data Center at 545 Washington Blvd, New Jersey will require in-person on-site support from this role.
This role sits at the point where strong cryptography meets dependable operations—ensuring controls work in practice, not just on paper. You’ll help keep key and certificate lifecycles robust, services stable, and evidence clear for audit and regulatory expectations.
Responsibilities
- Own end-to-end delivery and day-to-day management for US cryptography operations across HSBC platforms
- Oversee rollout, configuration management, upgrades, and end-of-life procedures for approved cryptographic hardware and software
- Manage HSM key and HSM certificate lifecycle operations, including rotation, renewal, and revocation-related workflows
- Establish and maintain crypto inventory controls to support resilience, compliance, and auditability
- Run incident management for cryptography services and issues, including key and certificate failures and HSM or KMS disruptions
- Deliver post-incident remediation and ensure runbooks are created, maintained, and consistently followed
- Embed internal controls for crypto infrastructure and key management in partnership with the internal control function
- Advance automation and engineering standards for cryptographic workflows, including approvals, templated configurations, deployment guardrails, and monitoring and alerting
Qualifications
- Substantial hands-on experience in cryptography operations, including PKI concepts, key management, and cryptographic algorithms and protocols
- Proven experience with HSM and KMS operational patterns, including provisioning and configuration, access controls, and key lifecycle practices
- Capability to design and troubleshoot cryptographic failures across dev, pre-prod, and prod environments
- Strong knowledge of encryption devices and standards, including HSM and software cryptography, plus data at rest and data in motion encryption
- Working knowledge of Unix or Linux platforms plus scripting and basic programming in Java or Python
- Experience working across cloud environments, including AWS, Azure, GCP, or Alibaba
- Understanding of security monitoring, audit evidence, and control outcomes for cryptographic control environments
- Ability to partner effectively with control owners and operational teams to maintain compliance using collaboration tools such as JIRA, Confluence, MS Teams, or SharePoint
Benefits
- Tailored professional development opportunities
- Competitive pay and benefits package, including a robust Wellness Hub
- Industry-leading volunteerism policy
- Generous matching gift program
- Comprehensive program of immersive Sustainability and Climate Change Initiatives
- Employee Resource Groups that play a central part in life at HSBC, including development and networking opportunities
Applicants must be legally authorized to work in the U.S., as HSBC will not engage in immigration sponsorship for this position.