Cryptography & Key Management Security Engineer

ph3Cryptography Key Management Security Engineer /h3h3About Capco /h3pCapco is a global business and technology consultancy specializing in the financial services and energy industries. We bring together industry knowledge, technology expertise, and an innovative mindset to support clients in complex transformation initiatives. /ppAt Capco, you will be part of a collaborative and entrepreneurial environment where you can work alongside experienced professionals, expand your expertise, and contribute to impactful projects across the financial services industry. /ph3The Role /h3pWe are looking for an experienced bCryptography Key Management Security Engineer /b with strong expertise in cryptographic technologies, PKI, Hardware Security Modules (HSMs), and secrets management. /ppThis is a specialist role for security professionals who enjoy combining bhands-on operational responsibilities with security advisory and strategic project work /b. /ppAs a Cryptography Key Management Security Engineer, you will support complex and business-critical security environments within the financial services sector. You will contribute to the secure management of cryptographic keys, digital certificates, and application secrets while helping organizations strengthen their cryptographic capabilities and prepare for future security challenges. /ppYou will collaborate with security specialists, architects, application teams, infrastructure experts, and other stakeholders to translate security and regulatory requirements into secure, scalable, and operationally feasible solutions. /ph3What You Will Do /h3pManage the lifecycle of bcryptographic keys, digital certificates, and application secrets /b, including rotation, renewal, revocation, and access management. /ppOperate, monitor, and support bHardware Security Module (HSM) /b infrastructures and other cryptographic platforms. /ppHelp ensure high availability, operational stability, and compliance of security-critical infrastructure. /ppSupport and execute bcryptographic key ceremonies /b. /ppInvestigate and resolve incidents related to encryption, authentication, certificates, key management, and secrets management. /ppSupport bPKI and certificate lifecycle management /b activities. /ppWork with bHashiCorp Vault /b or comparable technologies for secure application secrets management. /ppIdentify security risks and contribute to structural improvements and automation. /ppCollaborate with engineering and application teams to integrate cryptographic services securely into their environments. /ppAct as a trusted subject matter expert on cryptographic technologies, standards, algorithms, and security best practices. /ppYou will also have the opportunity to contribute to strategic security initiatives in areas such as: /ppbPost-Quantum Cryptography /b – assessing cryptographic risks and helping organizations prepare for the transition towards quantum-resistant solutions. /ppbCrypto Agility /b – improving the ability to replace, rotate, and manage cryptographic algorithms, keys, and certificates efficiently. /ppbPKI Certificate Readiness /b – preparing applications and platforms for evolving certificate and Extended Key Usage requirements. /ppbHSM Lifecycle Management /b – supporting upgrades, migrations, configuration, and renewal of HSM platforms. /ppbKey Management /b – improving governance and operational processes around cryptographic keys. /ppbSecurity Automation /b – automating certificate, key, and secrets management processes where possible. /ppbPlatform Integration /b – integrating cryptographic and security services into broader enterprise technology environments. /ph3What We Are Looking For /h3h3Experience /h3pb5+ years of relevant professional experience /b within IT Security, cybersecurity, cryptography, PKI, security infrastructure, or key management. /ppStrong hands-on experience in technically complex and business-critical IT environments. /ppExperience operating or supporting bhigh-availability security infrastructure /b. /ppExperience working with multiple technical and business stakeholders. /ppPrevious experience within bfinancial services or another highly regulated environment /b is strongly valued. /ppExperience working in Agile environments is considered an advantage. /ph3Business Technical Skills /h3pWe are looking for a professional with strong knowledge in several of the following areas: /ppbHardware Security Modules (HSMs) /b /ppbPublic Key Infrastructure (PKI) /b /ppDigital certificates and certificate lifecycle management /ppCryptographic key management /ppbHashiCorp Vault /b or similar secrets management platforms /ppCryptographic algorithms and standards /ppEncryption and authentication technologies /ppHigh-availability security infrastructure /ppSecurity and access management /ppSecurity compliance and regulatory requirements /ppCryptographic key ceremonies /ppHands-on experience with enterprise HSM technologies such as bnCipher/Entrust or compar