Cloud Security Engineer - Cryptography

Role Overview

We are seeking an experienced Cloud Security Engineer with a strong background in cryptography, cloud security, and enterprise key and certificate management. This role will support the design, implementation, and governance of security solutions that protect sensitive data across cloud and enterprise environments.

The ideal candidate will have hands-on experience with Futurex and Thales HSMs, Venafi, DigiCert, HashiCorp Vault, and Cortex XSOAR, along with a solid understanding of cryptographic technologies and cloud-native security.

Key Responsibilities

• Design and implement enterprise cryptographic solutions to protect sensitive data across cloud and on-premises environments.

• Develop and support solutions involving encryption, hashing, digital signatures, key management, certificate management, and secrets management.

• Manage and integrate Futurex and Thales Hardware Security Modules (HSMs) within enterprise environments.

• Support certificate lifecycle management using Venafi, DigiCert, or similar PKI/certificate management platforms.

• Implement and support enterprise secrets management solutions using HashiCorp Vault or comparable technologies.

• Support security automation and orchestration using Cortex XSOAR.

• Assess cybersecurity risks related to data confidentiality and integrity, including cryptographic vulnerabilities and emerging threats.

• Collaborate with cybersecurity product managers, architects, and engineering teams to design scalable cloud-based security solutions.

• Help mature enterprise cryptography governance through policies, standards, technical guidelines, and security controls.

• Support cloud-native environments across AWS, Azure, and/or Google Cloud Platform.

• Participate in technical design, troubleshooting, scripting, code reviews, and implementation activities.

• Stay current with emerging cybersecurity, cryptography, and cloud technologies and contribute to engineering best practices.

Required Qualifications

• High School Diploma, GED, or equivalent certification.

• 4+ years of Cyber Security experience.

• 2+ years of experience with cryptography and cryptographic technologies.

• 2+ years of experience with cloud-native technologies such as AWS, Azure, or Google Cloud Platform.

• 2+ years of Unix or Linux system administration experience.

• 2+ years of experience with Futurex and Thales HSMs.

• 2+ years of experience with Venafi and DigiCert, or comparable certificate lifecycle management solutions.

• 2+ years of experience with HashiCorp Vault or comparable secrets management solutions.

• 1+ year of experience with Cortex XSOAR.

Preferred Qualifications

• Bachelor’s degree.

• 5+ years of Cyber Security Engineering experience.

• 2+ years of coding or scripting experience using technologies such as Python, SQL, Java, JavaScript, Golang, Bash, PowerShell, Perl, or Ruby.

• 4+ years of experience with security tools and frameworks such as SIEM, IDS/IPS, and vulnerability scanning technologies.

• 2+ years of experience working within Agile development environments.

• Experience designing or supporting enterprise PKI, key management, secrets management, or cryptographic infrastructure.
  
  Proper email communication will only be done to and from @astyra.com email addresses. Please ensure you are communicating with approved Astyra recruiters by checking this point when receiving offers and messages from us. Please ensure you are communicating within these guidelines and proper channels for the quickest possible interview consideration!
  #AC