Security Design Engineer
We are currently looking for a Security Design Engineer to work with one of our financial services clients. This will be part of a project team working on SSH Key Management transformation. The role will be on a hybrid working model with 3 days per week in either Edinburgh, Sheffield or Birmingham.
Responsibilities will include managing end-to-end solution design and delivering design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, the Security Design Engineer will be required to publish new architecture patterns, key decisions, design deviations, and technical risks and issues where appropriate.
- Significant experience and proven technical depth within identity & access and cryptography
- Symmetric and Asymmetric Encryption: Using algorithms for secure data encryption and decryption.
- Public Key Infrastructure (PKI): Framework for managing digital certificates and public-key encryption.
- Hash Functions: Creating fixed-size hash values from data for integrity verification.
- Secure Key Exchange Protocols: Facilitating secure exchange of cryptographic keys over untrusted channels.
- Federated Identity Management: Enabling identity sharing and single sign-on across different organisations or domains.
- Privileged Access Management (PAM): Securing, controlling, and monitoring access to critical systems by privileged users.
- Authentication Protocols: Implementing secure authentication mechanisms like Kerberos, OAuth, and SAML.
- Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level
Platform & Technology
- BizzDesign, Archi, or generic UML visualisation experience for high-level designs
- Jira for project & tasks management
- Confluence for documentation
Contract will be inside IR35.