Encryption Engineer / CTM Specialist

Project context

Project Details

• Location: Madrid or Barcelona

• Work mode: Hybrid (2 days/week on-site)

• Start date: ASAP

• Duration: 6 months

• Extension possibility: Yes, up to 3 years

• Language(s): English (mandatory)

Project Summary

We are looking for an Encryption Engineer with deep expertise in the Thales CipherTrust Manager (CTM) platform to support both the ongoing Encryption Programme and day-to-day BAU operations. The consultant will be the technical point of contact for encryption use cases across on-premises and public cloud environments, and will coordinate directly with Thales as needed.

Goals and deliverables

Main Responsibilities & Key Activities

Programme Support:

• Define, study, and deploy new use cases and features within the CTM platform (e.g. DKE, Confidential Computing)

• Support migrations of encryption use cases (agent and agentless) between platforms

• Manage new integrations with AXA tools including Privileged Account Management, SIEM, Patching, and Virtual Host Console

• Participate in technical sessions for execution planning and troubleshooting

• Identify blocking points or incompatible/risky elements and propose remediation or mitigation solutions

BAU Operations:

• Onboard new encryption applications within the constraints of the encryption service

• Operate and maintain the platform in terms of performance, resilience, quality, and SLA

• Monitor the platform regularly and remediate incidents, problems, and issues

• Manage recertification of existing use cases

• Handle new requests from application owners

• Operate with standard tools: SILA, Change Management, Incident and Request Management, CMDB, CTM reports

• Apply security-by-default practices across all activities, including Pentest campaigns

Experience Required

• Hands-on experience with Thales CipherTrust Security Manager (CTM) and Luna HSM technology — this is non-negotiable; the candidate must have worked directly with this solution

• Database / DBA experience — mandatory; all encryption operations occur at database server level

• OS-level knowledge

• General IT background and understanding of enterprise IT ecosystems

• ITIL framework knowledge

• 3 to 5 years of experience, with confirmed hands-on use of Thales CTM within that period

• Ability to liaise and follow up directly with Thales