Cryptography Engineer

The role is responsible to Support the design, implementation, and daily operations of cryptographic key management processes. Assist in ensuring keys and cryptographic systems are securely maintained, compliant with standards, and aligned with organizational security requirements

• Manage and maintain key management systems (e.g., HSMs, key vaults, cloud KMS).
• Support the implementation of the enterprise key management strategy.
• Follow policies and procedures for the cryptographic key lifecycle (generation, storage, rotation, and revocation).
• Ensure encryption and signing services are properly integrated with applications and infrastructure.
• Ensure activities are compliance by preparing documentation and assisting in audits and reviews.
• Maintain records of configurations, processes, and key management activities.
• Monitor key management systems and report any anomalies or issues.
• Assist in investigating and resolving key-related incidents.
• Participate in periodic key usage reviews and risk assessments.
• Work with engineering, DevOps, and infrastructure teams to support implementation of cryptographic controls.
• Follow guidance on secure algorithms and best practices when implementing cryptographic solutions.
• Help promote awareness of key management and cryptography practices within the team.
• Carry out assigned tasks related to cryptographic operations and security controls.
• Perform any other duties assigned to by line manager related to the nature of the work.
• Enforce, incorporate, and comply with all necessary controls and related information security policies, procedures, practices, training, reporting, personal due diligence, and vigilance, within departmental/unit activities and operations.

Preferred Qualifications

• A tertiary-level qualification from an internationally recognized institution
• Industry-recognized certifications such as CISSP, CISM, CKA, CCSP, or equivalent.

Years & Nature of Experience

• Recommended 3 to 5 years of equivalent experience in Computer Science, Information Security, Engineering, or a related field.
• Proven experience as a Cryptographic Key Management lead, Security Manager, or Security Architect with a focus on encryption/key lifecycle.
• Strong knowledge of cryptographic principles, algorithms (AES, RSA, ECC, etc.), and secure key storage.
• Hands-on experience with HSMs, PKI, key vaults, cloud key management services, and encryption tooling.
• Familiarity with security standards and compliance requirements (e.g., NIST, ISO, PCI-DSS, FIPS).
• Experience leading technical teams and delivering secure solutions at scale.
• Excellent communication and stakeholder management skills.

Technical Competencies

• Cryptography & Key Management
• Security Architecture
• Incident Response
• Risk Management

Behavioural Competencies

• Analytical Thinking
• Complex Reasoning
• Communication
• Trust & Transparency