Solutions Architects with cybersecurity/cryptography

Strategic Staffing Solutions client - a large Scandinavian bank - is currently seeking Solutions Architects with cybersecurity/cryptography experience to join them for a 12+ month project.

Responsibilities:

• Work with internal stakeholders and define the end-to-end solution architecture for the cryptographic inventory, including discovery, ingestion, normalisation, enrichment, validation, reporting and lifecycle management of cryptographic assets.
• Security architecture and design: Design the target data model covering certificates, keys, algorithms, protocols, cipher suites, key stores, trust stores, HSMs, KMS services, secrets platforms, ownership, criticality, expiry, compliance status and exceptions.
• Define and validate integrations with key source systems such as CMDB, application portfolios, PKI, certificate lifecycle tools, HSMs, cloud KMS, secrets managers, CI/CD pipelines, vulnerability tools, GRC and SIEM platforms.
• Stakeholder collaboration: Work with a variety of stakeholders including third parties, product vendors, leadership, peers in the security organisation and across the company and establish ownership and governance models for cryptographic assets, communicate complex security topics in a clear, business relevant way.
• Define security controls for the inventory platform, including access management, privileged access, segregation of duties, audit logging, encryption, monitoring and secure administration.
• Regulatory and compliance alignment: Work with security requirements and support compliance to ensure solution contribute to internal and external compliance and regulatory requirements.
• Support security engineering teams by reviewing designs, advising on configuration, validating integrations, supporting testing and ensuring the solution is ready for production.
• Continuous improvement: Facilitate architecture assurance, risk assessments and threat modelling to ensure the solution meets security, audit, operational resilience, data protection and third-party risk requirements.

Requirements:

• Solid working understanding of cryptography, including encryption, signing, hashing, certificates, PKI, key lifecycle management, HSMs, KMS platforms, cipher suites and cryptographic protocols.
• Broad hands-on knowledge of application, infrastructure, cloud, hybrid environment and network security, including secure design principles and common control requirements.
• Experience working with stakeholders across the organisation in designing secure integrations using APIs, connectors, or event-driven patterns across enterprise platforms.
• Desirable certifications include CISSP, CCSP, CISM, SABSA, TOGAF, ISO 27001 Lead Implementer or Lead Auditor.
• Advanced diplomatic and communication skills in English.

Length of the project: 12 months with the possibility to extend

Hybrid work mode (3+ days in the office per week)