Data Security Engineer

Key Responsibilities:

• HSM Integration & Management: Design, deploy, configure, and maintain Utimaco HSMs for cryptographic key storage and processing. Ensure secure generation, storage, and usage of cryptographic keys in line with banking compliance frameworks.
• Key Management Systems (KMS): Architect and operationalize Key Management Systems to support key lifecycle management, including key generation, distribution,rotation, and destruction. Implement enterprise-grade encryption practices with emphasis on security, performance, and compliance.
• Payment Security Implementation: Secure the end-to-end lifecycle of payment transactions through encryption, tokenization, and key management protocols. Develop and enforce standards compliant with PCI DSS, EMV, and ISO 20022. Engage in securing real-time payments, SWIFT transactions, and digital banking services.
• PKI Deployment & Administration: Oversee Public Key Infrastructure (PKI), including the design and management of certificate authorities (CA), subordinate CAs, and registration authorities (RA). Administer certificate lifecycles, certificate revocation lists (CRLs), and secure digital certificate distribution.
• Banking Data Encryption: Implement encryption strategies for sensitive banking data both at rest and in transit, ensuring compliance with local and international financial regulatory frameworks, including GDPR, FFIEC, and Basel III. Utilize encryption algorithms such as AES, RSA, and ECC for optimal data protection.
• Security Hardening: Perform ongoing system hardening, security audits, and risk assessments across HSMs, KMS, PKI, and payment security infrastructure. Identify and mitigate vulnerabilities, ensuring that all cryptographic systems are resilient to attacks.
• Compliance & Risk Management: Ensure that all cryptographic operations adhere to industry and banking standards, such as ISO 27001, PCI DSS, NIST SP 800-57, FIPS 140-2, and eIDAS. Collaborate with internal audit teams to align practices with risk management and data protection policies.
• Incident Response & Monitoring: Provide expert-level support during security incidents related to cryptographic systems. Deploy proactive monitoring and logging to detect anomalies or breaches in data encryption systems.
• Performance Optimization: Fine-tune the performance of cryptographic hardware and software systems to meet the high transaction volumes typical of banking environments. Ensure minimal latency and robust throughput in key management and cryptographic processing.