Operation Security Engineer Cryptography - Permanent

Salary: CDI ou Freelance

Context

Join a Key, Certificate, and Key Management squad within the Production Security BE tribe! This team of about 15 experts based in Belgium specializes in the lifecycle management of cryptographic keys, certificates (internal/group/public), and application secrets (via Hashicorp Vault).

The mission is to secure electronic transactions, authentications, and cloud-hosted applications while ensuring full compliance with EU/Group regulations (e.g., PSD2, PCI) and industry standards.

As part of the broader System Security Cluster, the team operates and supports Hardware Security Modules (HSMs) like Adyton and nCipher, enabling a trustworthy environment for both internal and external customers. Innovation drives the team; they are the go-to partners for stakeholders, delivering cost-efficient, reliable security solutions that keep the bank and its clients safe.

Missions

1. Operations

• Manage the lifecycle of cryptographic keys, digital certificates, and application secrets (e.g., rotation, revocation, access control).
• Monitor and maintain HSM infrastructures (Adyton, nCipher, mainframe TKE) to ensure high availability and compliance.
• Troubleshoot incidents and collaborate with teams to resolve security gaps in authentication, encryption, or secret storage.

2. Expertise & Projects

• Act as a Crypto Design Authority (advise on cryptographic standards, algorithms, and best practices such as NIST, PCI-DSS, PSD2).
• Lead or contribute to strategic projects, including:
  • Post-Quantum Cryptography (assess risks, contribute to the migration of quantum resistant solutions)
  • EKU Readiness (prepare systems for Extended Key Usage (EKU) compliance)
  • HSM Lifecycle Management (LCM) (operate HSM support and configuration)
  • HSM: Key Ceremonies
  • Crypto Agility: improve certificate and key lifecycle management processes
  • Platform Integration: align with Group tools (Certis, Horizon)
• Partner with COE Security, Group Security, and other stakeholders like IT architects and IT application owners to translate regulatory and business requirements into technical solutions.

Tools & Environment

• Hardware Security Modules: Adyton, nCipher, mainframe TKE
• Cryptographic standards: NIST, PCI-DSS, PSD2
• Secrets management: Hashicorp Vault
• Microsoft Office (Word, Excel, PowerPoint)
• Preferable: Scripting (Python, Bash), ServiceNow, Rally, Portunus, Certis, Horizon

Working Conditions

• Language requirements:
  • Dutch: a plus
  • French: fluent spoken
  • English: fluent spoken and written
• Telework expectation: 50% on site & 50% homeworking
• Required experience: at least 5 years of relevant experience
• Contract and compensation details not specified in the description provided.