Cryptography Infrastructure Engineer(Payshield HSM)
Posted 1 week ago by Test Triangle
Negotiable
Undetermined
Undetermined
London, England, United Kingdom
Summary: The Cryptography Infrastructure Engineer (Payshield HSM) role focuses on enhancing the observability and resilience of Hardware Security Modules (HSMs) within a global financial context. The position requires collaboration with stakeholders and team members to implement monitoring solutions and contribute to the management of cryptographic services. Expertise in Thales Payshield HSMs and related technologies is essential for success in this role. The engineer will also be involved in documentation and continuous improvement efforts within the cryptographic services domain.
Key Responsibilities:
- Implement a new monitoring and alerting solution based on Splunk.
- Utilize specific knowledge about Thales Payshield HSMs to extract relevant data via SNMP.
- Collaborate closely with team members and stakeholders to understand requirements.
- Write design and test specifications for the observability project.
- Contribute to project documentation.
- Define the roadmap for continual improvements in cryptographic service management.
- Identify potential issues and propose creative solutions.
Key Skills:
- Good knowledge of HSMs, specifically Thales Payshield.
- Expertise in monitoring technologies such as SNMP.
- Stakeholder management skills with experience in meeting diverse needs.
- Team player with strong communication skills.
- Innovative mindset for developing new ideas and solutions.
- Understanding of cybersecurity principles and compliance standards.
- Knowledge of cryptographic modules and IT infrastructure technologies.
- Experience with SSH/SSL functionality.
- Strong documentation skills.
- Windows and Linux server administration.
Salary (Rate): undetermined
City: London
Country: United Kingdom
Working Arrangements: undetermined
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Payshield HSM Engineer Job Description
Job Title Cryptography Infrastructure Engineer
Location
Contract type Permanent/Contract
Working time Full time
Seniority level Specialist
Technologies we use in the role (Key words) Required Hardware Security Module (HSM), Thales Payshield HSMs, SNMP, Splunk, SSH, SSL, Confluence, Jira, Advanced Data Analysis in Excel, Service Now, Github, Cryptography.
Optional Public Key Infrastructures (PKI), Cryptography, Encryption Key Management, Cybersecurity governance, SSL/SSH, Windows administration, Linux administration
About The Project
Cryptography protects the identity, confidentiality and authenticity of trillions of dollars of transactions globally. It is a core service for the whole organization. Subject Matter Expertise & Engineering skills are required to be part of a project that improves HSM observability for the entire Clients encryption estate. The existing HSM observability is ready to be taken to the next level, improving its resilience, increased monitoring capabilities and faster alerting.
Your Responsibilities (bullet points)
- Be part of a team that implements a new monitoring and alerting solution based upon Splunk
- Have specific knowledge about Thales Payshield HSMs and pulling relevant data from the device (via SNMP)
- Closely collaborate with with team members – as SME for Thales Payshield HSMs, but also other HSMs.
- Work closely with stakeholders to understand requirement details.
- Write a design and test specification for your responsibility in the observability project
- Contribute to documentation of the project
- Help define the roadmap for continual improvements in the management of cryptographic services
- Flag potential issues timely, think outside the box and be creative in finding solutions.
Skills & Experience We Require (bullet points)
- Good knowledge about HSMs, specifically Thales Payshield.
- Understand how monitoring for HSMs work with expertise in the technologies such as SNMP
- Stakeholder management skills, with experience of understanding and meeting the needs of multiple stakeholders
- Knowing what it means to be part of a team, not only being a team player. Contribute to discussions, allow others to speak.
- Innovative mindset, we are doing something completely new, inhouse. This requires to speak up when it comes to innovations / new ideas.
- Understanding of cybersecurity principles, global financial services business models, as well as regional compliance standards, relevant local regulations, and applicable laws
- Knowledge of cryptographic modules and solutions, e.g. TPMs,
- Good understanding on IT Infrastructure technical platforms / technologies
- Understanding of SSH/SSL functionality and usage
- Experience interfacing with technology teams to bring lab concepts to market within an organization and building effective operational models to ensure capabilities are able to be fully utilized and grow to meet the needs of the team
- Understanding and knowledge of common industry cyber security frameworks, standards and methodologies, including; OWASP, ISO2700x series, PCI DSS, GLBA, GDPR, Global data security and privacy acts, FFIEC guidelines, CIS and NIST standards.
- Windows and Linux Servers administration
- Strong Documentation skills
OPTIONAL/NICE TO HAVE (bullet points)
- Academic/professional qualification in cryptography or cyber security field.
- Formal education in Information Security, Cybersecurity, Computer Science or similar and/or commensurate demonstrated work experience
- Industry qualifications (CISSP, CISA, CISM).
What We Offer (bullet points)
- Stable job in professional team
- Interesting path of career in an international organization
- Consistent scope of responsibilities
- Private health care, employees’ benefits