IT Production Engineer - Key Certificate Manager - HQ Brussels

<p><strong>YOUR JOB IN A NUTSHELL</strong></p><p>Join our <strong>Key, Certificate, and Key Management squad</strong> within the <strong>Production Security BE tribe</strong>, a team of <strong>15 experts</strong> based in Belgium. As a <strong>Cryptographic Security Expert</strong>, you’ll specialize in the lifecycle management of cryptographic keys, certificates (internal/group/public), and application secrets via <strong>Hashicorp Vault</strong>.&nbsp;</p><p>Your mission? To secure electronic transactions, authentications, and cloud-hosted applications while ensuring full compliance with <strong>EU/Group regulations (PSD2, PCI)</strong> and industry standards.</p><p>You’ll operate and support <strong>Hardware Security Modules (HSMs) like Adyton and nCipher</strong>, enabling a trustworthy environment for both internal and external customers. Here, you’ll be the go-to partner for stakeholders, delivering <strong>cost-efficient, reliable security solutions</strong> that keep the bank and its clients safe.</p><p>&nbsp;</p><p><strong>AND IN DETAIL</strong></p><p><strong>General</strong></p><ul><li>Manage the lifecycle of <strong>cryptographic keys, digital certificates, and application secrets</strong>&nbsp; including rotation, revocation, and access control.</li><li>Monitor and maintain <strong>HSM infrastructures (Adyton, nCipher, mainframe TKE)</strong> to ensure high availability and compliance.</li><li>Troubleshoot incidents and collaborate with teams to resolve security gaps in authentication, encryption, or secret storage.</li><li>Act as a <strong>Crypto Design Authority</strong>, advising on cryptographic standards, algorithms, and best practices (e.g., <strong>NIST, PCI-DSS, PSD2</strong>).</li></ul><p>&nbsp;</p><p><strong>Lead or contribute to strategic projects, including:</strong></p><ul><li>Post-Quantum Cryptography: Assess risks and contribute to the migration of quantum-resistant solutions.</li><li>EKU Readiness: Prepare systems for Extended Key Usage (EKU) compliance.</li><li><strong>HSM Lifecycle Management (LCM)</strong>: Contribute to the design of service patterns and infrastructure requirements.</li><li><strong>PKI Convergence</strong>: Streamline Public Key Infrastructure across the bank.</li><li><strong>Crypto Agility</strong>: Design flexible frameworks to adapt to evolving threats/standards and assist in automating workflows (e.g., <strong>IoT device onboarding</strong>).</li><li><strong>Platform Integration</strong>: Align with Group tools (<strong>Certis, Horizon</strong>).</li><li>Partner with <strong>COE Security, Group Security, IT architects, and IT application owners</strong> to translate regulatory and business requirements into technical solutions.</li></ul> <p><strong>YOUR TALENTS AND COMPETENCES</strong></p><ul><li><strong>Collaboration and results drive you</strong>: You work closely with stakeholders (<strong>IT architects, application owners, COE &amp; Group Security</strong>) to deliver tangible security solutions that meet both business needs and regulatory demands without losing sight of operational realities.</li><li><strong>Client-centric by design</strong>: Whether supporting internal teams or external partners, you translate complex cryptographic requirements (e.g., <strong>PSD2, PCI-DSS</strong>) into practical, user-friendly implementations that ensure trust and compliance.</li><li><strong>Deep IT security expertise</strong>: Your foundation is technical mastery of <strong>HSMs (Adyton/nCipher), PKI, Hashicorp Vault, and cryptographic standards (NIST)</strong>, paired with sharp operational oversight of high-availability infrastructures.</li><li><strong>Proactive and analytical</strong>: Beyond spotting risks (e.g., in <strong>post-quantum cryptography or EKU readiness</strong>), you proactively enhance processes (e.g., improving key and certificate rotation protocols).</li><li><strong>Agile in action</strong>: In a fast-evolving landscape (e.g., <strong>crypto-agility, IoT onboarding automation</strong>), you anticipate change, prioritize flexibly, and contribute to iterative enhancements without compromising production stability.</li><li><strong>Bridging tech and business</strong>: You turn abstract security requirements (e.g., from <strong>COE Security</strong>) into feasible IT solutions, balancing cost efficiency, compliance, and developer practicality.</li><li><strong>Languages</strong>: You communicate <strong>fluently in English</strong> (spoken and written) and have <strong>basic French</strong> (spoken).</li><li><strong>Tools</strong>: Proficiency in <strong>Microsoft Office (Word, Excel, PowerPoint)</strong> is mandatory. Scripting (<strong>Python, Bash</strong>), <strong>Power BI</strong>, and <strong>Rally</strong> are a plus.</li></ul>