About the role
Role & responsibilities
Encryption Key Solution Engineer responsible for designing, implementing, and supporting enterprise centralized key management and data protection solutions using Thales CipherTrust Manager (CTM) and Thales encryption products (e.g., HSMs, key vaults, tokenization) across hybrid (onprem) and cloud environments. The role owns secure key lifecycle processes (generation, rotation, escrow, revocation, destruction), integrates key management with applications, databases, and cloud platforms (AWS/Azure/GCP) via KMIP and APIs, partners with security/DevOps/infrastructure teams to embed encryption best practices, supports compliance initiatives (PCI-DSS, HIPAA, SOX, GDPR), troubleshoots complex encryption issues, and produces architecture/documentation/runbooks while providing technical guidance to other engineers
Preferred candidate profile
- Thales CipherTrust Manager (CTM)
- Thales HSMs (e.g., Luna HSM)
- Key lifecycle management
(generation, rotation, escrow, revocation, destruction)
- KMIP protocol
- Cryptographic algorithms (AES, RSA, ECC, SHA-2/3)
- PKI concepts and certificate lifecycle management
- TLS/SSL and secure communications
- Cloud key management services/integrations
(AWS KMS, Azure Key Vault, GCP KMS)
Millions of jobs, with real people getting hired every day
Questions, answered
Click "Apply with JobAssist" – we tailor your resume and application to this role and submit it for your approval.
Yes. This role at SP Software was screened before publishing – we confirmed the employer before listing it.
The employer didn't disclose a salary range for this listing. JobAssist shows pay whenever it's available.
This position can be done from anywhere, with no in-office requirement.
Yes – every application is tailored from your profile and this job's requirements, and you can review and edit before it's sent.