Senior Encryption & Data Protection Engineer

Support encryption program activities and define/deploy new use cases or features (e.g., Double Key Encryption (DKE) and Confidential Computing).
Manage the migration of encryption use cases (both agent and agent-less) across different platforms.
Integrate encryption solutions with other corporate tools and products, including Privileged Account Management (PAM), SIEM, Patching tools, and Virtual Host Consoles.
Participate in technical sessions to define execution plans and lead troubleshooting efforts.
Identify project roadblocks, technical incompatibilities, or risks, and propose mitigation strategies.

Execute daily encryption operations utilizing Thales CipherTrust Manager (CTM) and Luna HSM technologies.
Onboard new encryption applications while respecting corporate service constraints and compliance rules.
Maintain platform performance, resilience, quality, and ensure SLA compliance.
Regularly monitor the encryption platform to remediate incidents, problems, and technical issues.
Recertify existing encryption use cases and manage new onboarding requests from application owners.

Operate standard corporate tools daily (e.g., Change Management processes, Incident/Request management tools, CMDB, and CTM reporting).
Enforce "Security by Default" principles across all BAU and program activities.
Provide feedback and remediation actions to continuously improve the platform's security posture, particularly during Penetration Testing (Pentest) campaigns.

Experience: Minimum of 5 years of relevant IT security/infrastructure experience.
Core Systems: Strong background in Operating Systems (OS) and Database Administration (DBA).
Methodology: Solid understanding and experience working within ITIL frameworks.
Ecosystem: Comprehensive IT background and broad knowledge of complex IT ecosystems.
Location: Based in Madrid.

eNGLISHKey Technologies: Hands-on experience with Thales CipherTrust Manager (CTM) and Thales Luna HSM.
Advanced Encryption Concepts: Knowledge of Double Key Encryption (DKE) and Confidential Computing.
Integrations: Experience integrating security platforms with SIEM, PAM (Privileged Account Management), and virtualization consoles.
Security Auditing: Experience participating in and remediating findings from Penetration Testing.

English is a must

Madrid

See also