Cryptography Engineer

TEKsystems•Charlotte, NC

1d•$75 - $80•Onsite

About The Position

We're seeking a Security Engineer with hands-on experience in cryptography, encryption, and enterprise key management. This role will focus on supporting and enhancing HSM, KMS, and data protection solutions across enterprise environments.

Requirements

Enterprise key management, encryption, and cryptographic infrastructure.
HSM technologies such as Thales Luna, payShield, CipherTrust, CloudHSM, or comparable platforms.
KMIP, PKCS#11, cryptographic APIs, and encryption standards.
Linux and Windows administration.
PowerShell and/or Python automation.
Cloud security services, KMS solutions, and containerized environments.
Strong understanding of compliance frameworks and security best practices.

Nice To Haves

Kubernetes, OpenShift, Docker, Helm, Terraform, or Ansible.
Database encryption technologies (SQL Server TDE, Oracle TDE, PostgreSQL).
Splunk, Dynatrace, or similar monitoring tools.
Banking, payments, or highly regulated industry experience.
Exposure to Post-Quantum Cryptography (PQC) and crypto-agility initiatives.

Responsibilities

Design, implement, and support enterprise cryptographic services and key management platforms.
Administer and maintain HSM and KMS solutions, including key lifecycle management.
Implement encryption, tokenization, secrets management, and data protection controls.
Partner with application, cloud, and security teams to define cryptographic requirements and controls.
Automate operational processes using PowerShell, Python, and related tools.
Support platform upgrades, patching, vulnerability remediation, and compliance initiatives.
Contribute to cloud-native security, certificate management, and Zero Trust programs.