Principal Engineer, Cryptographic Key Management System

• Conducts security assessments, code reviews, and vulnerability testing to identify and mitigate risks
• Develops proactive security measures and strategies to enhance the security posture across various technologies
• Serves as an authority in cybersecurity, providing guidance and leadership to various business units
• Drives strategic security initiatives to protect against cyber threats and ensure compliance with security standards
• Evaluates new technologies and processes for potential security vulnerabilities and recommends corrective actions
• Mentor peers and junior team members, imparting expertise in security technologies, enterprise solution design, and effective customer interaction

• Bachelor’s Degree plus 7 years of related work experience OR Advanced degree with 5 years of related experience
• Acceptable areas of study include Computer Science or Information Technology
• 7-10 years conducting security assessments and vulnerability testing to identify and mitigate risks in digital environments
• 7-10 years developing and implementing cybersecurity measures across various technologies including mobile and IoT devices, cloud services, and network technologies
• 7-10 years leading and collaborating with engineering teams to enhance security postures and strategic cybersecurity initiatives
• Domain expert in enterprise cryptographic key management, including Thales Payshield payment HSMs, Luna HSMs, key lifecycle operations, cryptographic integrations, and post-quantum cryptography readiness.
• Knowledge of federal & compliance regulations e.g. SOX, PCI, CPNI, FIPS 140-2/140-3, CMMC Level 2, and NIST 800-171/172
• Advance knowledge of Scripting tools (Python/Perl/Shell/HTML/PHP)
• Knowledge of artificial intelligence (AI) and machine learning (ML) concepts, including their applications, benefits, risks, and impact on cybersecurity operations
• Experience with high level design architecture, security technologies, networking, web services and SOA
• Strong understanding of cloud security principles and standard processes (e.g., AWS, Azure, GCP)

Demonstrates expertise in conducting security assessments, vulnerability testing, and developing cybersecurity measures across various technologies. Proficient in enterprise cryptographic key management and knowledgeable in compliance regulations to enhance organizational security posture.

• Security Assessments
• Vulnerability Testing
• Cybersecurity Measures Development
• Enterprise Cryptographic Key Management
• Compliance Regulations Knowledge

• Cybersecurity
• Vulnerability Testing
• Security Assessments
• Cryptographic Key Management
• Scripting (Python/Perl/Shell/HTML/PHP)
• Cloud Security Principles
• High Level Design Architecture
• Networking
• Web Services
• SOA

• Leadership
• Mentoring
• Collaboration
• Customer Interaction

• SOX
• PCI
• CPNI
• FIPS 140-2/140-3
• CMMC Level 2
• NIST 800-171/172
• Artificial Intelligence
• Machine Learning

• Thales Payshield
• Luna HSM
• AWS
• Azure
• GCP