Senior Cryptography Engineer, NewDay

• Experience in key handling, segregation of duties and split knowledge in a Cryptographic operations team
• Certificate Management
• Solid understanding of HSM technologies, Thales services, and technologies like HashiCorp Vault
• Previous experience in Financial Services, for example, banking, consumer lending, payments, and card-issuing
• Understanding of Software Delivery pipelines and automating key management activities
• Solid grasp of various types of encryptions like File/Folder level encryption, database file encryption and application encryption
• Communication, problem-solving, documentation, and presentation skills
• Detailed knowledge and understanding of how to respond to cryptography incidents
• Good understanding of security and compliance frameworks and standards for cryptography, e.g. PCI-DSS, PCI-PIN, PCI-CPP, NIST, FIPS

Desirable

• Building and scaling out our cryptographic and key management operations
• Engage with our engineering and product teams, facilitating their adoption and use of cryptographic capabilities and enabling them to build secure products
• Ensure compliance with key protection standards and practices, supporting ongoing audit and assurance activities
• Implement and maintain processes for managing cryptographic keys
• Contribute to implementing and operationalising secure key storage mechanisms to support a modern cloud-native consumer lending platform
• Review and build team processes and procedures
• Work with the Platform Team to build pipelines supporting cryptography operations
• Key generation and distribution activities across the lifecycle of cryptographic keys
• Input on policy related to cryptography and key management
• Keep abreast of industry practices and standards related to key management
• Collaborate with cybersecurity and information security teams to integrate key management practices into NewDay's security strategy
• Participate and support audits and assessments related to cryptographic key practices