Jack Henry & Associates
Senior Information Security Engineer: PKI/Cryptography
Jack Henry & Associates, Birmingham, Alabama, United States, 35275
Overview
At Jack Henry, we deliver technology solutions that are digitally transforming and empower community banks and credit unions to provide enhanced and streamlined user experiences. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us. We are hiring a Senior Information Security Engineer to join our growing Systems Security team. The Systems Security team designs, implements, and manages security infrastructure solutions deployed across the enterprise. This position directly supports our cryptographic key management program by implementing and operating secure key management solutions, including PKI, HSM, and other key escrow services. This position will focus on developing cryptographic solutions and standards for the business, improving efficiencies, and automation. This position may be worked remotely, but you must reside within 70 miles of one of our office locations in Allen, TX; Birmingham, AL; Cedar Falls, IA; Charlotte, NC; Lenexa, KS; Louisville, KY; Monett, MO; Springfield, MO. May require occasional travel, up to 5% for meetings, trainings or conferences. Salary range for this position is $92,000-140,000, depending on candidate experience and geographic location. All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity. What you'll be responsible for
Collaborate with engineering and development teams to integrate cryptographic services into new and existing applications and products. Manage all aspects of cryptographic key lifecycles for enterprise systems and applications, ensuring compliance with the NIST framework across data centers, multi-cloud (GCP, AWS, Azure), and third-party environments. Develop and automate solutions for key management and certificate lifecycle challenges. Establish and maintain security policies, standards, and procedures for cryptographic products and services. Lead high-level cryptographic security initiatives and ensure timely follow-up on findings from security reviews. Participate in product Change Control Boards and work with other JHA departments to ensure security of products and services. Research Post-Quantum Cryptography and prepare the infrastructure for a future transition to quantum-safe encryption. May perform other job duties as assigned. What you'll need to have
Minimum of 6 years of information security or compliance experience. Experience with PKI, Hardware Security Module (HSM) management, and FIPS 140-2 compliance. Demonstrated experience with Data Security Manager and Security Key Lifecycle Manager platforms (e.g. Fortanix, Thales Luna, Cipher Trust, nCipher, IBM SKLM). Experience with Public Cloud HSMs on at least one major cloud platform (GCP, AWS, or Azure). Strong background in Linux administration and a deep understanding of command-line tools and scripting. What would be nice for you to have
Experience with Fortanix, Thales Luna, CipherTrust, nCipher HSMs. Experience in a highly regulated industry (e.g., finance, healthcare). Experience implementing and supporting PKI in a multi-cloud/multi-datacenter environment. Experience implementing and supporting HSMs in a multi-cloud/multi-datacenter environment. Experience providing guidance and education on cryptographic concepts and implementation in software development. Experience designing and deploying emerging cryptographic technologies. Expertise in writing and interpreting Splunk queries for monitoring and troubleshooting. Experience with Python, PowerShell, or other scripting automation tools. Experience with Linux, Git, Jenkins. CISSP, GIAC, or CCSP certification. Bachelor's Degree. Equal Employment Opportunity
No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law. Requests for full corporate job descriptions may be requested through the interview process at any time. #J-18808-Ljbffr
At Jack Henry, we deliver technology solutions that are digitally transforming and empower community banks and credit unions to provide enhanced and streamlined user experiences. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us. We are hiring a Senior Information Security Engineer to join our growing Systems Security team. The Systems Security team designs, implements, and manages security infrastructure solutions deployed across the enterprise. This position directly supports our cryptographic key management program by implementing and operating secure key management solutions, including PKI, HSM, and other key escrow services. This position will focus on developing cryptographic solutions and standards for the business, improving efficiencies, and automation. This position may be worked remotely, but you must reside within 70 miles of one of our office locations in Allen, TX; Birmingham, AL; Cedar Falls, IA; Charlotte, NC; Lenexa, KS; Louisville, KY; Monett, MO; Springfield, MO. May require occasional travel, up to 5% for meetings, trainings or conferences. Salary range for this position is $92,000-140,000, depending on candidate experience and geographic location. All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity. What you'll be responsible for
Collaborate with engineering and development teams to integrate cryptographic services into new and existing applications and products. Manage all aspects of cryptographic key lifecycles for enterprise systems and applications, ensuring compliance with the NIST framework across data centers, multi-cloud (GCP, AWS, Azure), and third-party environments. Develop and automate solutions for key management and certificate lifecycle challenges. Establish and maintain security policies, standards, and procedures for cryptographic products and services. Lead high-level cryptographic security initiatives and ensure timely follow-up on findings from security reviews. Participate in product Change Control Boards and work with other JHA departments to ensure security of products and services. Research Post-Quantum Cryptography and prepare the infrastructure for a future transition to quantum-safe encryption. May perform other job duties as assigned. What you'll need to have
Minimum of 6 years of information security or compliance experience. Experience with PKI, Hardware Security Module (HSM) management, and FIPS 140-2 compliance. Demonstrated experience with Data Security Manager and Security Key Lifecycle Manager platforms (e.g. Fortanix, Thales Luna, Cipher Trust, nCipher, IBM SKLM). Experience with Public Cloud HSMs on at least one major cloud platform (GCP, AWS, or Azure). Strong background in Linux administration and a deep understanding of command-line tools and scripting. What would be nice for you to have
Experience with Fortanix, Thales Luna, CipherTrust, nCipher HSMs. Experience in a highly regulated industry (e.g., finance, healthcare). Experience implementing and supporting PKI in a multi-cloud/multi-datacenter environment. Experience implementing and supporting HSMs in a multi-cloud/multi-datacenter environment. Experience providing guidance and education on cryptographic concepts and implementation in software development. Experience designing and deploying emerging cryptographic technologies. Expertise in writing and interpreting Splunk queries for monitoring and troubleshooting. Experience with Python, PowerShell, or other scripting automation tools. Experience with Linux, Git, Jenkins. CISSP, GIAC, or CCSP certification. Bachelor's Degree. Equal Employment Opportunity
No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law. Requests for full corporate job descriptions may be requested through the interview process at any time. #J-18808-Ljbffr