Cryptography/Key Management Engineer

The Cryptography/Key Management Engineer will be responsible for developing, implementing, and maintaining encryption solutions to safeguard our data. This role requires expertise in encryption technologies, a thorough understanding of cybersecurity practices, and in-depth knowledge full lifecycle management of cryptographic keys.

– Define processes and support design and implementation of encryption strategies for data at rest, in transit, and in use using technologies like AES, TLS, and public key cryptography.
– Support design, deploy, and manage secure encryption key management solutions across on-premise and Cloud. Handle full lifecycle management of cryptographic keys, including generation, rotation, backup, archival, and secure destruction.
– Responsible for providing SME consultancy to influence the business and architecture to deliver cryptographic solutions aligning to strategy and directions provided by stream leads and management.
– Responsible for assessing risks associated with cryptographic & key management systems and recommend mitigations
– Support and help develop the required documentation for the operational teams such as standard operating procedures, key management plan/design, key ceremony documents, etc.
– Collaborate with IT and security teams to integrate encryption solutions into existing infrastructure.
– Collaborate with application and infrastructure teams to integrate secure key usage and storage into applications and platforms.
– Provide training and support to staff on encryption best practices.

With the following results (SMART)   

Develop and deploy procedures and processes for key management solutions across on-premise and Cloud.
Work with the stakeholders for the improvement and compliance of key management systems in accordance with the standards and industry best practices. 
Ensure encryption strategy covers all data leakage channels. 
Develop procedure and process documentation for the Data Security
Leverage existing encryption tools and technologies, such as AES, RSA, and PKI. 
Work closely with Stakeholders to integrate encryption solutions seamlessly. 
Enhance overall data security and compliance with industry standards. 
Improve the company’s encryption posture to prevent data breaches and ensure regulatory compliance.