Remote Principal Cryptographic Security Engineer - Reyes Holdings

Pay Transparency Statement:


 The compensation philosophy reflects the Company’s reasonable expectation at the time of posting. We consider a number of factors when making individual compensation decisions including, but not limited to, skill sets, experience and training, and other business needs.  This role may also be eligible to participate in a discretionary incentive program, subject to the rule governing the program. 





Position Summary: The Principal Cryptographic Security Engineer will design, implement, and maintain Reyes Family of Business Global cryptography strategy and own the end-to-end delivery of enterprise cryptographic solutions and technologies. You will take an active role in providing subject matter expertise for Certificate Lifecycle Management, Certificate Authorities/Public Key Infrastructure (PKI), Hardware Security Modules (HSM), Data Access Governance, and modern data protection/cryptographic protocols and constructs utilized to safeguard data in motion, at rest, and while in use (e.g., tokenization, encryption, modern data de-valuation techniques). The Principal Cryptographic Security Engineer also maintains current knowledge of modernized computing paradigms, automation/orchestration frameworks, APIs, virtualization platforms, and security threats, recommends security enhancements and purchases that allow the Reyes Family of Businesses to deliver the most secure and robust digital applications deployed within the organization and within the cloud.





Position Responsibilities may include, but not limited to:



+ Responsible for defining proactive enterprise cryptography and data protection strategy


+ Performs in-depth research on cryptographic industry risks and trends and performs benchmarking analysis to provide enhanced insights on cryptographic maturity compared to industry peers and competitors


+ Develop policies and procedures related to cryptography management


+ Work with security and development teams to ensure that our solutions meet security standards and regulatory requirements


+ Driving the business process definition across the enterprise cryptographic arena


+ Negotiating and liaising with different business and technology teams within the organization


+ Collaborate with Managed Service Providers to ensure they deliver effective and efficient support services based on contract terms, focusing on security, resiliency, and always available mobility services. Review and leverage vendor maintenance and support agreements to ensure support, response, and escalation


+ Partner and collaborate with other teams in Architecture, Strategy, Planning, Performance, Project Delivery, Service Delivery, and Service Management to ensure the efficient and optimal delivery of IT Services


+ Other projects or duties as assigned




Required Skills and Experience:



+ Bachelor’s degree in a technology discipline and 6+ years of related experience in the IT industry, with experience in cryptographic services and cryptographic security. Or High School Diploma and 9+ years of the above-stated experience, in lieu of a Bachelor’s degree


+ Proven ability to independently identify and resolve critical and complex issues through practical problem-solving skills


+ Highly familiar with modern network, computing, storage, database, virtualization, cloud, and security technologies


+ Experience with application management, configuration management, OS baseline configuration, and integration with security tools


+ End-to-end understanding of the secure software development lifecycle (SSDLC) and DevOps/DevSecOps process integration


+ Must have knowledge of current and emerging device architectures and security standard methodologies


+ Candidate should understand APIs, automated deployment methods, and API security management in a corporate setting


+ Proficiency or working knowledge of cybersecurity frameworks and methodologies such as NIST and/or ISO


+ Participate in an on-call rotation to provide leadership support as needed, which may include off hours


+ This position must pass a post-offer background and drug test



Preferred Skills and Experience:



+ Experience in Operations/On-Prem. Certificate Authority (Microsoft) CA/PKI Infrastructure


+ Experience in Certificate Mgmt. System/Card Management System (Venafi, Keyfactor, Entrust, etc.)


+ HSM management (Entrust Ncipher HSM, Thales Luna, etc.), PKI, 802.1x/EA-TLS Authentication protocols, Kerberos, OAuth, OpenID Connect, Web Services, Wireless Networks, AD, LDAP, MFA technologies


+ Operations/Management of a PKI environment that is aligned with government regulations around a medium level of assurance for Identity


+ Prior experience working with a managed service provider


+ Prior experience managing teams in a global enterprise multi-site environment (>150 locations)


+ Master's Degree



Physical Demands and Work Environment:Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Due to the nature of our business in regard to such things as delivery schedules, order inputs, selection, and Department of Transportation Hours of Service, overtime, attendance and punctuality are essential job functions. Should an individual in this classification not be able to adhere to this requirement due to a disability, they should contact their Human Resources department to see what, if any, reasonable accommodation may be made.






Equal Opportunity Employee & Physical Demands


Reyes Holdings and its businesses are equal opportunity employers. Company policy prohibits discrimination and harassment against any applicant or employee based on race, color, religion, sex, pregnancy or pregnancy-related medical conditions, marital status, sexual orientation, gender identity or expression, age, national origin, citizenship, disability, genetic information, military or veteran status, or any other basis protected by applicable law. In addition, the Company is committed to providing reasonable accommodation to applicants and employees in accordance with applicable law. Requests for accommodation should be directed to your point of contact in the Talent Acquisition or Human Resources departments.


Background Check and Drug Screening


Offers of employment are contingent upon successful completion of a background check and drug screening.


Pay Transparency


Our compensation philosophy embraces diverse factors for fair pay decisions, valuing skills, experience, and the needs of our business. Moreover, this role may have the opportunity to participate in a discretionary incentive program, subject to program rules.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation and gender identity, national origin, disability, or protected veteran status. Drug Free Workplace.