Crypto Automation Engineer - 55296

# of positions: 2

Duration: 6 months

Extension possible: yes

Conversion Possible: yes

Interview Process: 1 round most likely

Work Location: Hybrid- 2x a week- flexible on days, 740 Progress Avenue

CANDIDATE PROFILE DETAILS:

Degree/Certifications Required: CISSP- nice to have

Years of experience: 7 years

Reason for request/why opened: new project

% Interaction with Stakeholders: fair amount

Project Scope: Greywolf project- protect data for the bank

Team Size: brand new team. 5 to 6 people, new members joining

Personality Style/Team Culture: hard working, collaborative

Selling Points of Position: work on a new an important project for the bank, can be a long term role.

Best Vs Average Candidate: Design, architecture, automation, using the tool.

Design and build certification automation.

Ansible, Terraform experience

If they have cryptography experience, strong nice to have

How will performance be measured: deliverables

SUMMARY OF DAY TO DAY RESPONSIBILITIES:

• Design & Develop Automation: Architect, build, test, and deploy automated systems and workflows for managing cryptographic assets and operations, including:

o Certificate lifecycle management (certificate issuance, renewal, revocation).

o Symmetric and asymmetric key generation, distribution, and rotation.

o Integration with certified key management platforms.

o Automated provisioning/de-provisioning of cryptographic services for applications and infrastructure.

• Integrate Cryptographic Services: Develop tools, APIs, and integrations to seamlessly incorporate cryptographic functions (encryption, decryption, signing, verification) into applications, CI/CD pipelines, and infrastructure components.

• Infrastructure Management: Implement and manage cryptographic infrastructure using Infrastructure-as-Code (IaC) principles (e.g., Terraform, Ansible) for consistency, repeatability, and scalability.

• Certificate Management: Automate Certificate management to prevent outages and security incidents related to expired or invalid certificates.

• Tooling & Scripting: Write high-quality, maintainable code (primarily in languages like Python, Powershell, Bash) and leverage appropriate tools and libraries for automation tasks.

• Documentation: Maintain clear and comprehensive documentation for automation code, processes, architectures, and configurations.

MUST HAVE:

1.) DevOps

2.) programming languages (e.g., Python, Bash, PowerShell).

3.) Hands-on experience with automation tools and frameworks (e.g., Ansible, Terraform, Jenkins, GitHub).

NICE TO HAVE

1.) Cryptographic knowledge

2.) Banking exp

3.) CISSP

The Crypto Automation Engineer team will be responsible for designing, developing, implementing, and managing automated solutions for cryptographic services and infrastructure. Automation engineer will play a critical role in securing our organization's data and systems by automating key management, certificate lifecycles, encryption processes, and other cryptographic operations, thereby enhancing efficiency, reliability, and security posture.

This will entail collaboration with the Crypto Requirement team, Crypto Engineer team, Crypto Operation team and Security Architecture team.

Key Responsibilities:

• Design & Develop Automation: Architect, build, test, and deploy automated systems and workflows for managing cryptographic assets and operations, including:

o Certificate lifecycle management (certificate issuance, renewal, revocation).

o Symmetric and asymmetric key generation, distribution, and rotation.

o Integration with certified key management platforms.

o Automated provisioning/de-provisioning of cryptographic services for applications and infrastructure.

• Integrate Cryptographic Services: Develop tools, APIs, and integrations to seamlessly incorporate cryptographic functions (encryption, decryption, signing, verification) into applications, CI/CD pipelines, and infrastructure components.

• Infrastructure Management: Implement and manage cryptographic infrastructure using Infrastructure-as-Code (IaC) principles (e.g., Terraform, Ansible) for consistency, repeatability, and scalability.

• Certificate Management: Automate Certificate management to prevent outages and security incidents related to expired or invalid certificates.

• Tooling & Scripting: Write high-quality, maintainable code (primarily in languages like Python, Powershell, Bash) and leverage appropriate tools and libraries for automation tasks.

• Documentation: Maintain clear and comprehensive documentation for automation code, processes, architectures, and configurations.