Information Security Engineer

About the role

Serve as a technical subject matter expert for Thales CipherTrust Key Manager and CipherTrust Transparent Encryption, designing, implementing, administering, and supporting enterprise encryption and key management solutions across Linux, Unix, and Windows environments.

Responsibilities

• Serve as a technical SME for Thales CipherTrust Key Manager and CipherTrust Transparent Encryption.
• Design, implement, administer, and support enterprise encryption and key management solutions.
• Troubleshoot complex CipherTrust, encryption, operating system, and security appliance issues.
• Support Linux, Unix, and Windows environments, including OS hardening, tuning, troubleshooting, and application support.
• Perform administration and support of Hardware Security Modules (HSMs) and other security appliances.
• Develop and maintain automation and scripting solutions using Python, Bash, PowerShell, Ansible, or similar technologies.
• Support infrastructure upgrades, security patches, firmware upgrades, and version upgrades for CipherTrust, HSMs, and related security infrastructure.
• Participate in implementation planning, testing, deployment, and operational readiness for technology upgrades.
• Support change management, incident management, and problem resolution within a large enterprise environment.
• Apply knowledge of cryptographic protocols, algorithms, encryption technologies, and key management practices.
• Work with technologies including format-preserving encryption (FPE), tokenization, and transparent data encryption (TDE).
• Develop implementation plans and technical standards for security technologies.
• Partner with engineering, infrastructure, operations, cybersecurity, and other technology teams to deliver secure and resilient solutions.
• Create technical documentation, procedures, and knowledge-transfer materials.
• Mentor and guide less experienced engineers and help establish engineering best practices.
• Coordinate multiple technical initiatives while meeting aggressive delivery timelines.
• Participate in Agile methodologies, including Scrum and Kanban.

Requirements

• 5+ years of experience in Information Security Engineering or equivalent combination of work experience, training, military experience, or education.
• 5+ years of hands-on experience with Thales CipherTrust Key Manager (CTKM) and CipherTrust Transparent Encryption (CTE).
• 5+ years of experience with scripting and automation using technologies such as Python, Bash, PowerShell, Ansible, VBScript, JavaScript, or UiPath.
• 5+ years of Unix/Linux/Windows Systems Administration experience.
• Strong experience with OS troubleshooting, hardening, and performance tuning.
• 5+ years of experience with encryption and/or tokenization technologies.
• 3+ years of experience building, administering, or supporting Hardware Security Modules (HSMs) or security appliance devices.
• Advanced knowledge of cryptographic protocols and algorithms.
• Strong understanding of cryptographic technologies and enterprise key management.
• Experience with FPE, tokenization, and TDE.
• Experience implementing infrastructure upgrades, security patches, firmware upgrades, and software/version upgrades.
• Experience supporting applications in Linux and Windows server environments.
• Experience with enterprise change and incident management practices.
• Experience working within Agile Scrum or Kanban environments.

Qualifications

• Experience working in large, complex, and highly regulated enterprise technology or information security environments.
• Experience conducting technical product assessments and developing implementation plans.
• Experience mentoring and developing less experienced engineers.
• Strong analytical, problem-solving, and troubleshooting skills.
• High attention to detail and accuracy.
• Security certifications such as CISSP, GIAC, or equivalent.
• Cloud certifications such as AZ-900, MS-900, or equivalent/higher.
• Experience with Ansible, Puppet, Chef, or similar automation technologies.
• Experience designing and implementing synthetic transactions for application or infrastructure monitoring.
• Knowledge of the banking or financial services industry.
• Strong ability to coordinate multiple priorities and deliver within aggressive timelines.

Skills

• Thales CipherTrust Key Manager
• Security
• Information security
• Python
• Bash
• Ansible
• Encryption
• CipherTrust Transparent Encryption
• VBScript
• PowerShell