Senior Cryptography & Information Security SME CGEMJP00351299

Role purpose / summary

We are seeking an experienced Senior Cryptography & Information Security SME to support a large-scale enterprise Cryptography Programme. The successful candidate will be responsible for the design, implementation, management, and operational support of cryptographic services and controls across a complex technology landscape.

The role requires deep technical expertise in cryptography, strong stakeholder engagement skills, and the ability to drive secure outcomes within highly regulated environments.

Key Responsibilities

• Cryptography & Security Engineering
• Design, deploy, configure, and support enterprise cryptographic solutions.
• Manage cryptographic key lifecycle processes, including generation, distribution, rotation, archival, and destruction.
• Support and administer Hardware Security Modules (HSMs).
• Manage enterprise PKI and Certificate Management platforms.
• Implement and maintain cryptographic controls aligned with security and regulatory requirements.
• Conduct technical reviews and security assessments of cryptographic implementations.

Programme Delivery

• Support the delivery of cryptography-related projects and strategic initiatives.
• Participate in proof-of-concept, testing, implementation, and production deployment activities.
• Collaborate with infrastructure, security, application, and architecture teams.
• Provide technical leadership and consultation to project teams.

Operations & Governance

• Support incident, problem, risk, and change management activities.
• Develop operational processes, standards, procedures, and technical documentation.
• Participate in root cause investigations and remediation planning.
• Ensure compliance with enterprise security policies and governance standards.
• Stakeholder Management
• Engage with technical and non-technical stakeholders.
• Present recommendations, risks, and technical solutions to leadership teams.
• Provide mentorship and knowledge transfer to operational support teams.

Required Qualifications

Education

Bachelor's Degree in Cyber Security, Information Security, Computer Science, Engineering, Information Technology, or a related discipline.

Equivalent professional experience may be considered in lieu of formal education.

Experience

• 7+ years of Information Security experience.
• 5+ years of hands-on cryptography experience.
• Experience working in enterprise-scale infrastructure environments.
• Experience supporting security programmes within regulated industries such as Financial Services, Banking, Insurance, or Government.

Preferred Certifications

• One or more of the following:
• Security Certifications
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• GIAC Security Certifications
• SABSA Foundation or Practitioner
• ISO 27001 Lead Implementer or Lead Auditor
• Cryptography & PKI Certifications
• Entrust PKI Certification
• Thales Luna HSM Training/Certification
• DigiCert PKI Certifications
• Venafi Professional Certification
• Microsoft Security Certifications
• Preferred Technical Tools & Platforms
• HSM Platforms
• Thales Luna HSM
• Entrust nShield HSM
• AWS CloudHSM
• Azure Dedicated HSM
• PKI & Certificate Management
• Microsoft Active Directory Certificate Services (ADCS)
• DigiCert
• Entrust PKI
• Venafi
• Keyfactor
• AppViewX

Key Management Technologies

• HashiCorp Vault
• AWS KMS
• Azure Key Vault
• Google Cloud KMS
• Thales CipherTrust Manager
• Operating Systems
• Linux (RHEL, CentOS, Ubuntu)
• Windows Server
• Security & Monitoring
• Splunk
• Microsoft Sentinel
• QRadar
• Dynatrace
• Datadog
• Infrastructure & Automation
• PowerShell
• Python
• Bash/Shell Scripting
• Ansible
• Terraform
• Git