Senior Encryption & Data Protection Engineer

Descripción del puesto / Funciones

1. Program Support & Innovation

• Support encryption program activities and define/deploy new use cases or features (e.g., Double Key Encryption (DKE) and Confidential Computing).
• Manage the migration of encryption use cases (both agent and agent-less) across different platforms.
• Integrate encryption solutions with other corporate tools and products, including Privileged Account Management (PAM), SIEM, Patching tools, and Virtual Host Consoles.
• Participate in technical sessions to define execution plans and lead troubleshooting efforts.
• Identify project roadblocks, technical incompatibilities, or risks, and propose mitigation strategies.

1. Business As Unusually (BAU) Operations

• Execute daily encryption operations utilizing Thales CipherTrust Manager (CTM) and Luna HSM technologies.
• Onboard new encryption applications while respecting corporate service constraints and compliance rules.
• Maintain platform performance, resilience, quality, and ensure SLA compliance.
• Regularly monitor the encryption platform to remediate incidents, problems, and technical issues.
• Recertify existing encryption use cases and manage new onboarding requests from application owners.

1. Service Expertise & Security

• Operate standard corporate tools daily (e.g., Change Management processes, Incident/Request management tools, CMDB, and CTM reporting).
• Enforce "Security by Default" principles across all BAU and program activities.
• Provide feedback and remediation actions to continuously improve the platform's security posture, particularly during Penetration Testing (Pentest) campaigns.
• Requisitos mínimos

Experience

Minimum of 5 years of relevant IT security/infrastructure experience.

Core Systems

Strong background in Operating Systems (OS) and Database Administration (DBA).

Methodology

Solid understanding and experience working within

ITIL

frameworks.

Ecosystem

Comprehensive IT background and broad knowledge of complex IT ecosystems.

Location

• Based in Madrid.
• Requisitos valorables

eNGLISHKey Technologies

Hands-on experience with

Thales CipherTrust Manager (CTM)

and

Thales Luna HSM

.

Advanced Encryption Concepts

Knowledge of

Double Key Encryption (DKE)

and

Confidential Computing

.

Integrations

Experience integrating security platforms with SIEM, PAM (Privileged Account Management), and virtualization consoles.

Security Auditing

Experience participating in and remediating findings from Penetration Testing.

Idiomas

• English is a must
• Ubicación
• Madrid