Encryption Services Engineer (Hybrid)

At Broadridge, we've built a culture where the highest goal is to empower others to accomplish more. If you're passionate about developing your career, while helping others along the way, come join the Broadridge team.

We are looking to hire an Encryption Services Engineer to join our Security Engineering Team in Information Security! The Security Engineering Team is a diverse team of individuals, working together globally, to protect our Network Infrastructure from threats.

We are made up of high-performing teams that meet in person to learn and collaborate as needed. This role is considered hybrid, which means you'll be assigned to a Broadridge office and will work both on-site and remote.

Responsibilities:

• You will be focused on engineering and implementation of new and existing security solutions focused on encryption technologies.
• Expand the existing and build new Hardware Security Module infrastructure to help centralize key storage and improve security
• Aspire to become "go-to" person for anything encryption services related
• Help drive our PKI automation strategy with continual improvements in our security posture.
• Keep abreast of industry changes that alter or impact our PKI Infrastructure or processes.
• Support all domain management tasks, procurements, transfers, and domain record updates.
• Bring maturity to each solution and maximize our investment.
• Maintain, support, and troubleshoot all technology areas.
• Perform daily certificate life-cycle management tasks, both legacy workflows and Venafi.
• Perform incident response for domain, file encryption and certificate related issues
• Mentor and guide other associates and teammates
• Communicate with auditors, clients and senior management
• Work on assimilating digital assets from acquired companies

• 3+ years' experience with engineering, implementation, and support in the following technologies. The vendors listed are preferred:
  • Thales - Luna HSM, CipherTrust
  • Venafi - TLS Protect, Code Sign Protect, Advanced Key Protect
  • AWS Cloud HSM
• Any working experience with the following technologies is also desirable:
  • Code-signing, s/MIME certificates
  • Hardware Security Modules (HSM)
  • Certificate Authorities
  • Python
  • GPG/PGP Encryption
  • Powershell
  • BMC Remedy
  • Markmonitor
  • BitSight
  • Datadog
  • IIS
  • Citrix Netscaler
  • F5
  • Splunk
• Candidates should be well-spoken, decisive, and quick thinking; be able to focus on tasks of priority but also make time for tasks of lesser priority; work efficiently by being organized and have a strong work ethic.
• We are looking for leadership qualities in this candidate. Project and time management will be core fundamentals of the job role.
• This includes detailing tasks, setting and achieving on-time delivery dates, coordinating the efforts of other teams, communicating effectively to all participants, and driving projects to completion.
• All associates participate in an off-hour support rotation. Change implementation is risk based; candidates will need to work on weekends when and if necessary.