The Crypto Engineer supports the secure operation and management of TNS cryptographic infrastructure. This role will serve as a Cryptographic Custodian in Region 3, supporting Hardware Security Module (HSM) operations, cryptographic key management, certificate lifecycle management and customer liaison.
The position works closely with the global Cryptography and Security Engineering teams to ensure the integrity, confidentiality, and availability of cryptographic assets supporting critical payment and network services. The role will also assist with HSM migrations, infrastructure upgrades, and security compliance activities.
Responsibilities:
The main responsibilities are
- Serve as the Cryptographic Custodian for Region 3(Asia-Pacific), in support of Region 1(Americas) & Region 2(Europe)
- Support for Development and Testing across APAC time zones.
- Provide local operational support for HSM systems requiring physical access for administration and troubleshooting & the maintenance of Hardware Security Modules (HSMs) providing business continuity and disaster recovery.
- Assist with certificate of lifecycle management (CLM) including issuance, renewal, revocation and automation.
- Participate in security audits,
compliance activities, and documentation related to cryptographic controls.
- Collaborate with Security Engineering and Operations teams to support cryptographic infrastructure and production services.
- Support tasks across wider security requirements.
Experience Required:
- Solid understanding of cryptography, key management, and security best practices.
- Ability to work in environments requiring dual control and strict security procedures.
- Strong written and verbal English communication skills.
- Ability to work independently while coordinating with global teams.
- Willingness to support occasional after-hours maintenance activities.
- Experience in cryptography or security engineering.
- Experience with Hardware Security Modules (HSMs) from vendors such as Thales, Utimaco, Futurex, nCipher or similar.
- Experience with TLS/SSL certificates and PKI environments.
- Experience in payments, financial services, or regulated environments preferred.
- Familiarity with security frameworks such as PCI DSS or P2PE is an asset.