Security Design Engineer - SSH Key Management

I Confidential; Birmingham; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

A leading financial services firm is looking for an experienced Security Design Engineer to join a hybrid project team working on SSH Key Management transformation. This role requires significant expertise in identity & access management and cryptography. Key responsibilities include managing end-to-end solution designs, delivering design documents, and addressing design deviations. The ideal candidate has a solid background in secure data handling and authentication protocols, along with experience in project management tools like Jira and Confluence.

Qualifications

• Significant experience and proven technical depth in identity & access and cryptography.
• Experience in secure data encryption and decryption using different algorithms.
• Ability to manage digital certificates and public-key encryption.

Responsibilities

• Managing end-to-end solution design and delivering design documents.
• Publishing new architecture patterns and key decisions.
• Addressing design deviations and technical risks.

Skills

Identity & Access Management

Cryptography

Symmetric and Asymmetric Encryption

Public Key Infrastructure (PKI)

Hash Functions

Secure Key Exchange Protocols

Federated Identity Management

Privileged Access Management (PAM)

Authentication Protocols

Communication with non-security technical SMEs

Tools

BizzDesign

Archi

UML visualization

Jira

Confluence

Job description

We are currently looking for a Security Design Engineer to work with one of our financial services clients. This will be part of a project team working on SSH Key Management transformation. The role will be on a hybrid working model with 3 days per week in either Edinburgh, Sheffield or Birmingham.

Responsibilities

Responsibilities will include managing end-to-end solution design and delivering design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, the Security Design Engineer will be required to publish new architecture patterns, key decisions, design deviations, and technical risks and issues where appropriate.

• Significant experience and proven technical depth within identity & access and cryptography
• Symmetric and Asymmetric Encryption: Using algorithms for secure data encryption and decryption.
• Public Key Infrastructure (PKI): Framework for managing digital certificates and public-key encryption.
• Hash Functions: Creating fixed-size hash values from data for integrity verification.
• Secure Key Exchange Protocols: Facilitating secure exchange of cryptographic keys over untrusted channels.
• Federated Identity Management: Enabling identity sharing and single sign-on across different organisations or domains.
• Privileged Access Management (PAM): Securing, controlling, and monitoring access to critical systems by privileged users.
• Authentication Protocols: Implementing secure authentication mechanisms like Kerberos, OAuth, and SAML.
• Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level

Platform & Technology

• BizzDesign, Archi, or generic UML visualisation experience for high-level designs
• Jira for project & tasks management
• Confluence for documentation