Thales Encryption Engineer

Job Summary: We are seeking a skilled Thales Encryption Engineer to provide engineering, operational, and project support for organisation's Thales encryption platforms, including Cipher Trust Manager (CTM) and Hardware Security Module (HSM) administration. The ideal candidate will have a strong background in encryption technologies, key lifecycle management, and compliance support, with a focus on delivering high-quality solutions in a collaborative environment.

Responsibilities:

• Administer and support the Thales CipherTrust Manager (CTM) platform.
• Install, configure, upgrade, and maintain CipherTrust infrastructure.
• Manage encryption policies, key lifecycle management, and security controls.
• Configure clustering, high availability, auditing, and logging features.
• Support onboarding of new applications and systems to the Thales platform.
• Perform health checks, upgrades, patching, and operational maintenance.
• Review and align encryption controls with security and compliance requirements.
• Produce operational documentation, SOPs, and technical standards.
• Collaborate with infrastructure, security, application, and project teams on encryption-related initiatives.
• Manage and administer enterprise HSM infrastructure.
• Configure HSM partitions, key stores, and security domains.
• Perform HSM provisioning, initialization, firmware upgrades, and lifecycle management.
• Maintain HSM backup, recovery, synchronization, and restoration procedures.
• Support cryptographic key generation and protection using HSM-backed controls.
• Ensure secure storage and management of master keys, root keys, wrapping keys, and encryption certificates.
• Coordinate HSM capacity planning, resilience testing, and disaster recovery readiness activities.
• Support future HSM implementation, migration, and onboarding projects.
• Support internal, external, customer, ISAE, ISO27001, SOC, and regulatory audits.
• Produce encryption evidence, control documentation, audit reports, and compliance artifacts.
• Maintain audit logs, evidence repositories, and encryption compliance records.
• Review and remediate audit findings and control gaps.
• Ensure encryption controls align with applicable regulatory and security frameworks including ISO27001, ISAE 3402, GDPR, and Corporate Information Security Standards.

Mandatory Skills:

• Thales CipherTrust Manager
• Encryption at Rest and Data Protection technologies
• Key Management and HSM concepts
• Windows and Linux server administration
• Security compliance and audit support
• Strong troubleshooting and documentation skills
• Thales Luna HSM
• Hardware Security Module administration
• Certificate and cryptographic services
• Key wrapping and key escrow concepts