Cryptography Operations Engineer

About the role

Barclays is looking for a Cryptography Operations Engineer in Knutsford, within the Chief Information Security Office (CISO). The role manages and monitors the bank's cryptographic assets across all use cases, protecting the confidentiality, integrity and authenticity of sensitive data through day-to-day support and 24/7 on-call duty as part of a global team. It is a hands-on engineering role focused on symmetric and asymmetric cryptography, with extensive work on Hardware Security Modules and key management.

Key responsibilities

• Manage and monitor cryptographic assets and solutions used in banking applications, ensuring they meet the Cryptography Standard
• Run security assessments and penetration tests of cryptographic implementations, then implement mitigations and report findings to senior stakeholders
• Support service management of cryptography solutions globally, including incident, problem, change and vulnerability management
• Develop training content and technical documentation on cryptographic concepts, best practice and security procedures
• Advocate for improved security controls and present complex ideas to technical and non-technical audiences
• Lead a team, set objectives, coach employees and appraise performance, or lead collaborative assignments as an individual contributor

Required profile

• Experience in cryptography and information security, key management and HSM configuration, installation and support
• Certificate management experience
• Stakeholder management with the ability to influence and negotiate at all levels
• Attention to detail, accuracy and the ability to make informed decisions under tight deadlines
• Some highly valued skills: security or project management background, operational environments, incident response and change management, documentation skills, and familiarity with SharePoint, Confluence and JIRA

Required skills

• Excellent knowledge of symmetric and asymmetric cryptography, algorithms, protocols and technologies (digital signatures, key exchange, encryption)
• Familiarity with Windows and Linux servers
• Use of Thales and Entrust vendor tools for HSMs

The role follows anchor days on Monday and Tuesday, works standard UK hours (9 AM-5 PM) with 24/7 on-call rotation, and involves off-site work in data centres. Candidates must follow the Barclays values and mindset.