Cryptography Operations Engineer

Salary: £60,000 - 90,000 per year

Requirements:

• Experience in cryptography and information security
• Experience in key management
• Experience in HSM configuration, installation, and support
• Experience in certificate management
• Stakeholder management skills with the ability to influence and negotiate at all levels
• Excellent attention to detail and accuracy
• Ability to make informed decisions under tight deadlines and manage multiple priorities effectively
• Relevant security or project management experience is highly valued
• Background in operational environments, IT infrastructure, incident response, and change management is highly valued
• Documentation skills for operational procedures are highly valued
• Familiarity with SharePoint, Confluence, and JIRA is highly valued
• Unix and Windows operating system knowledge is highly valued

Responsibilities:

• We manage and monitor our cryptographic assets across all use cases, ensuring the confidentiality, integrity, and authenticity of sensitive data through BAU and on-call support in our 24/7 global team
• We collaborate with internal and external customers and stakeholders to understand cryptographic needs across the organisation and share best practices
• We execute security assessments and penetration testing to identify vulnerabilities in cryptographic implementations and procedures
• We guide mitigation strategies and communicate findings to senior stakeholders
• We implement and monitor cryptographic solutions used in our banking applications to ensure they function correctly and meet our Cryptography Standard
• We develop training content to share expertise on cryptographic concepts, best practices, and security procedures in line with standards and industry regulations
• We contribute to technical documentation and specifications for cryptographic designs and implementations
• We provide subject matter expertise in cryptography methodologies
• We manage and support the service management of cryptography solutions used globally, including incident, problem, change, and vulnerability management
• We understand and apply cryptographic principles including symmetric and asymmetric keys, digital signatures, key exchange, and encryption
• We advocate improvements and implement security controls where appropriate
• We present complex ideas effectively to technical and non-technical audiences at all levels of leadership
• We advise and influence decision making, contribute to policy development, and take responsibility for operational effectiveness
• We collaborate closely with other functions and business divisions
• We lead collaborative assignments, guide team members, and identify opportunities to involve other areas of specialisation
• We consult on complex issues and provide advice to support resolution of escalated issues
• We identify ways to mitigate risk and develop new policies and procedures in support of our control and governance agenda
• We take ownership of managing risk and strengthening controls in relation to our work
• We engage in complex analysis of data from multiple sources to solve problems creatively and effectively
• We communicate complex and sensitive information clearly and influence stakeholders to achieve outcomes

Technologies:

• Cryptography
• Confluence
• Hardware
• HSM
• Support
• JIRA
• Linux
• Security
• SharePoint
• Unix
• Windows

More:

We are Barclays, and this role sits within our Cryptography Operations team in the Chief Information Security Office (CISO). You will help safeguard encryption keys and cryptographic services that support secure multi-tenancy encryption across multiple enterprise applications. This is a hands-on engineering role working with Hardware Security Modules and vendor tools from Thales and Entrust, supporting production-grade cryptographic applications and key management solutions at scale. We work across complex infrastructure environments, including Windows and Linux servers. The role is based in Knutsford at Radbroke Hall, is full time, follows anchor days on Monday and Tuesday, operates on standard UK hours of 9 AM to 5 PM, and includes a 24/7 on-call support rotation. The role will also require off-site working to support equipment implementation within data centres. We offer the opportunity to grow technical and service management capability in cryptography within a supportive engineering environment.

last updated 34 week of 2026