Cryptographic HSM and Key Management Engineer

Salary: £60,000 - 90,000 per year

Requirements:

• Experience in cryptography and information security covering key management, HSM configuration, installation, support, and certificate management.
• Ability to diagnose and resolve certificate-related issues across applications, networks, and operating systems, including configuration, connectivity, certificate issues, and hardware failures.
• Strong ITIL certification and strong stakeholder management skills, with the ability to influence and negotiate at all levels.
• Valid driving licence with no driving convictions; a driving assessment will be conducted as part of the role.
• Excellent attention to detail and accuracy.
• Ability to make informed decisions under tight deadlines and manage multiple priorities effectively.
• Relevant security or project management certifications are highly valued.
• Background in operational environments, IT infrastructure, incident response, and change management is highly valued.
• Strong documentation skills for operational procedures are highly valued.
• Familiarity with SharePoint, Confluence, and JIRA is highly valued.
• Unix/Windows operating system knowledge is highly valued.

Responsibilities:

• Develop, implement, and maintain solutions that support the safeguarding of our systems and sensitive information.
• Provide subject matter expertise on security systems and engineering patterns.
• Develop and implement protocols, algorithms, and software applications to protect sensitive data and systems.
• Manage and protect secrets, ensuring they are securely generated, stored, and used.
• Execute audits to monitor, identify, and assess vulnerabilities in our infrastructure and software, and support response to potential security breaches.
• Identify advancements to support the innovation and adoption of new cryptographic technologies and techniques.
• Collaborate across the bank, including with developers and security teams, to ensure cryptographic solutions align with business objectives, security policies, and regulatory requirements.
• Develop, implement, and maintain Identity and Access Management solutions and systems.
• Advise and influence decision making, contribute to policy development, and take responsibility for operational effectiveness.
• Lead collaborative assignments, guide team members, and identify the need for other areas of specialisation to complete assignments.
• Consult on complex issues and provide advice to people leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and develop new policies and procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Engage in complex analysis of data from multiple sources to solve problems creatively and effectively.
• Communicate complex information and influence or convince stakeholders to achieve outcomes.
• Work hands-on with hardware security modules, using Thales and Entrust vendor tools, to operate and support production-grade cryptographic applications and key management solutions at scale.
• Support secure, multi-tenancy encryption across more than 300 enterprise platforms.
• Work across complex infrastructure environments with strong familiarity in both Windows and Linux servers.
• Provide on-call support rotation and support off-site work for the implementation of equipment within data centres.

Technologies:

• Cryptography
• Confluence
• Hardware
• HSM
• Support
• ITIL
• JIRA
• Linux
• Security
• SharePoint
• Unix
• Windows

More:

We are Barclays, and this role sits within our Chief Information Security Office (CISO) as a Cryptographic HSM and Key Management Engineer. We offer a highly hands-on opportunity to safeguard encryption keys and cryptographic services that support secure, multi-tenancy encryption across more than 300 enterprise platforms. The role follows anchor days on Monday and Tuesday, operates on standard UK hours of 9 AM–5 PM, and includes a 24/7 on-call support rotation. The successful candidate will be based at Radbroke Hall in Knutsford, with off-site working required to support the implementation of equipment within data centres. We expect colleagues to demonstrate our Values of Respect, Integrity, Service, Excellence and Stewardship, as well as our Mindset to Empower, Challenge and Drive.

last updated 35 week of 2026