Senior Cloud Engineer (Encryption Key Solution Engineer)

Role & responsibilities

Encryption Key Solution Engineer responsible for designing, implementing, and supporting enterprise centralized key management and data protection solutions using Thales CipherTrust Manager (CTM) and Thales encryption products (e.g., HSMs, key vaults, tokenization) across hybrid (onprem) and cloud environments. The role owns secure key lifecycle processes (generation, rotation, escrow, revocation, destruction), integrates key management with applications, databases, and cloud platforms (AWS/Azure/GCP) via KMIP and APIs, partners with security/DevOps/infrastructure teams to embed encryption best practices, supports compliance initiatives (PCI-DSS, HIPAA, SOX, GDPR), troubleshoots complex encryption issues, and produces architecture/documentation/runbooks while providing technical guidance to other engineers

Preferred candidate profile

Thales CipherTrust Manager (CTM)

Thales HSMs (e.g., Luna HSM)

Key lifecycle management

(generation, rotation, escrow, revocation, destruction)

KMIP protocol

Cryptographic algorithms (AES, RSA, ECC, SHA-2/3)

PKI concepts and certificate lifecycle management

TLS/SSL and secure communications

Cloud key management services/integrations

(AWS KMS, Azure Key Vault, GCP KMS) .