Cryptographic HSM and Key Management Engineer

Job Description

Purpose of the role

To develop, implement and maintain solutions that support the safeguarding of the banks systems and sensitive information.  

Accountabilities

• Provision of subject matter expertise on security systems and engineering patterns.
• Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems.
• Management and protection of secrets, ensuring that they are securely generated, stored, and used.
• Execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches.
• Identification of advancements in to support the innovation and adoption of new cryptographic technologies and techniques.
• Collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements.
• Development/Implementation and maintenance of Identity and Access Management solutions and systems.

Assistant Vice President Expectations

• To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/business divisions.
• Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes.
• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
• OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
• Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
• Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, etc.) to solve problems creatively and effectively.
• Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
• Influence or convince stakeholders to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.

Join Barclays as a Cryptographic HSM and Key Management Engineer within the Chief Information Security Office (CISO), where you will play a critical role in safeguarding encryption keys and cryptographic services that support secure, multi-tenancy encryption across more than 300 enterprise platforms.

This is a highly hands-on role for an experienced engineer with strong knowledge of symmetric and asymmetric cryptography, cryptographic algorithms, and policy-driven security controls. You will work extensively with Hardware Security Modules, using Thales and Entrust vendor tools, and be responsible for operating and supporting production-grade cryptographic applications and key management solutions at scale. You will also need to be comfortable working across complex infrastructure environments, with strong familiarity in both Windows and Linux servers.

The role follows anchor days on Monday and Tuesday and operates on standard UK hours (9 AM–5 PM), with 24/7 on-call support rotation. The role will require off site working to support the implementation of equipment within data centres.

To be successful in this role, you will need the following:

• Experience in Cryptography and Information Security covering Key Management, HSM configuration/installation/support and Certificate Management.
• Ability to diagnose and resolve certificate related issues across applications, networks, and operating systems, including configuration, connectivity, certificate issues and hardware failures.
• A strong a ITIL certification and strong stakeholder management skills with the ability to influence and negotiate at all levels.
• Valid driving licence with no driving convictions. A driving assessment will be conducted as part of the role.
• Excellent attention to detail and accuracy. Ability to make informed decisions under tight deadlines and manage multiple priorities effectively.

Some other highly valued skills may include:

• Relevant security or project management certifications.
• Background in operational environments, IT Infrastructure, incident response and change management.
• Strong documentation skills for operational procedures.
• Familiarity with SharePoint, Confluence, and JIRA.
• Unix/Windows operating system knowledge.

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job-specific technical skills.

The successful candidate will be based in Radbroke Hall, Knutsford.