Crypto Network Specialist

Mbda Systems; Bristol; Hybrid; GBP 51,000 - 60,000; Full time

Job summary

A leading defense organization in the United Kingdom seeks a Crypto Network Specialist to manage its cryptographic estate and contribute significantly to the Network Security team. The ideal candidate will possess strong knowledge of cryptographic processes and a solid understanding of network security principles. This role offers a competitive salary of up to £60,000 and a dynamic hybrid working model.

Benefits

Company bonus up to £2,500

Pension contribution up to 14%

Opportunity for paid overtime

Up to 15 additional days of leave

Enhanced parental leave

Subsidised meals and free parking

Qualifications

• Solid understanding of cryptographic equipment and management processes.
• Self-motivated and able to work under pressure.
• Strong understanding of common enterprise protocols.

Responsibilities

• Manage Crypto Network processes including compliance.
• Help implement changes securely and manage incidents.
• Coordinate Network Equipment orders and deliveries.

Skills

Cryptographic equipment management

Analytical mindset

IPv4 fundamentals

Common enterprise protocols

Microsoft Office

Monitoring tools familiarity

Tools

Linux

VMware vSphere

Job description

Crypto Network Specialist

Join our forward-thinking IM Networks team at MBDA as a Crypto Network Specialist. You will own our cryptographic estate and processes while playing an active, hands‑on role in the Network Security team. The role focuses 70‑80% crypto governance/operations and 20‑30% network/security operations, helping us deliver secure, resilient connectivity across a multi‑national environment.

Salary: Up to £60,000 depending on experience.

Dynamic (hybrid) working: 2‑3 days per week on‑site depending on business need; shift work may be required.

Security Clearance: DV (DV is not a current requirement; it will be applied for after a successful BPSS clearance).

Nationality: British. Restrictions and/or limitations relating to nationality and/or rights to work may apply. After the offer stage, all successful candidates will undergo HMG Basic Personnel Security Standard checks (BPSS) managed by MBDA Personnel Security Team. If you do not have SC, an SC application will follow a successful BPSS clearance, followed by a DV application.

What we can offer you

• Company bonus: Up to £2,500 (based on company performance, varies year to year)
• Pension: maximum total (employer and employee) contribution up to 14%
• Overtime: opportunity for paid overtime
• Flexi Leave: up to 15 additional days
• Flexible working: we welcome applicants seeking flexible working arrangements
• Enhanced parental leave: up to 26 weeks for maternity, adoption and shared parental leave plus enhancements for paternity, neonatal and fertility treatments
• Facilities: fantastic site facilities including subsidised meals, free car parking and more

The opportunity

As a Cryptographic Network Specialist, you will play a key role in our Network Security strategy and management. You will report to the Network Operations Manager and support us with implementing changes securely, identifying vulnerabilities, managing incidents and ensuring compliance with our accreditation requirements.

Crypto leadership and governance

• Managing the Crypto Network processes including ordering, Key Material Edit validity, and equipment/KM deliveries.
• Ensuring Crypto Management Plans are completed and submitted to the relevant authorities in a timely manner.
• Ensuring that mandated checks on cryptographic devices and associated items are performed and documented to agreed standards.
• Working with our Crypto custodians to ensure accurate transfer of information and maintain records.
• Coordinating crypto change windows (key loads/rollovers), supporting incident response related to crypto assets, and driving continuous improvement of crypto processes.
• Ensuring that Key Material is ordered from NCSC/MoD and delivered/installed in a timely manner, avoiding any lapse of service or derogation requests.
• Regular status review calls with our Crypto stakeholders (internal and external).
• As the Crypto subject‑matter expert, the CNS will perform the CNA role for IM Networks.

Operations, domains & personnel

• Managing internet domain registrations (renewals, new registrations, DNS hygiene) and coordinating with partners to prevent lapses.
• Contributing to runbooks, design documents, standards, audit artefacts, and promoting clear documentation and knowledge transfer across the team.
• Supporting the Network Security Manager with day‑to‑day shift management of Network Security engineers.
• Coordinating Network Equipment orders, tracking from purchase requisition through to equipment delivery.

We’re looking for a passionate Network Security professional with expertise in cryptographic processes who wants to have a direct impact on the overall resilience of our Network Security environment.

What we're looking for from you

Must‑have/Essential

• Solid understanding of cryptographic equipment and management processes, including key lifecycle, custody, evidence and compliance.
• Self‑motivated, ambitious, and tenacious, able to work under pressure.
• A strong, analytical mindset.
• A methodical and structured approach to document management.
• Strong IPv4 fundamentals: subnetting, routing, ACLs, NAT, troubleshooting (packet flow, TCP/IP, MTU/MSS, etc.).
• Strong understanding of common enterprise protocols (OSPF/BGP, HSRP/VRRP, 802.1Q, Port‑Channels).
• Comfortable working with Microsoft Office, Windows Server/AD, Linux, and VMware vSphere in support of network/security services.
• Familiarity with monitoring tools (PRTG, Nagios) and using telemetry to inform troubleshooting.

Nice‑to‑have/Desirable

• Line Management experience.
• IPv6, multicast, and advanced QoS exposure.
• Cisco ISE (NAC/SGT), Cisco DNA Centre/SDA, or Cisco ACI familiarity.
• Automation/scripting (Ansible, Python) for repeatable changes and evidence collection.
• Load balancing (e.g., F5), secure email/web gateways, or SD‑WAN exposure.
• Certifications: CCNA/CCNP (Enterprise or Security), PCNSA/PCNSE, Check Point CCSA/CCSE, VMware VCP, Linux+ / RHCSA (or equivalent experience).
• Practical experience with Cisco Catalyst Center/Nexus (L2/L3).
• Exposure to next‑gen firewalls (e.g., Palo Alto/Cisco/Check Point) and secure proxies (e.g., Broadcom/Blue Coat), including change management and policy hygiene.

Our company: Peace is not a given, Freedom is not a given, Sovereignty is not a given

MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom.

We are proud of our employee‑led networks, including Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more. We recognise that everyone is unique, and we encourage you to speak to us if you require any advice, support or adjustments throughout our recruitment process.

Follow us on LinkedIn (MBDA), X (@MBDA_UK), Instagram (MBDA_UK) and Glassdoor, or visit our MBDA Careers website for more information.