Cryptography & Encryption Expert (3 Years Experience)

About the role

A cybersecurity and data protection team is looking for an Expert Consultant in Cryptography and Encryption to work in critical, hybrid and highly regulated environments. The role covers designing encryption architectures, managing keys and supporting production deployments.

Key responsibilities

• Analyze business and technical requirements and design encryption, KMS and HSM architectures.
• Prepare High-Level and Low-Level Design documents and network flow matrices.
• Install, configure and administer CipherTrust Manager, CTE, CCKM and CAKM.
• Integrate Thales Luna HSM, AWS KMS and third-party systems via KMIP, PKCS#11 or REST APIs.
• Define encryption, access control, key rotation and key lifecycle policies.
• Implement high availability, backup and recovery, and disaster recovery solutions.
• Perform migrations, upgrades, testing and production deployments; troubleshoot incidents and coordinate vendor escalations.
• Produce runbooks, operational procedures and handover documentation, and train technical and security teams.

Required profile

• Master's degree (Bac+5) or engineering degree in Computer Science, Cybersecurity or Systems Engineering.
• At least 3 years of hands-on experience in cryptography, encryption or data security.
• Demonstrated operational experience with CipherTrust Manager and/or CTE.
• Ability to write technical documentation in French and English.

Required skills

• CipherTrust Manager, CTE, cryptography and key management (must-have)
• CCKM, CAKM, KMIP, Thales Luna HSM, AWS KMS, HA/DR (strongly preferred)
• Nice to have: Azure Key Vault, Google Cloud KMS, PKCS#11, BYOK/HYOK, automation, Kubernetes
• Linux, Windows, networking, virtualization and cloud environments
• Familiarity with ISO 27001, PCI DSS and NIST standards