Cybersecurity Analyst / Cryptography Analyst

Job Description

Cybersecurity Analyst / Cryptography Analyst

Looking for an opportunity to work on meaningful projects and cutting-edge technologies? Join a high-performing team in the insurance sector for our client and contribute to initiatives that strengthen security, support digital transformation, and drive operational excellence in a fast-paced and collaborative environment.

What is in it for you:

• Salaried: $45-55 per hour.

• Incorporated Business Rate: $52-62 per hour.

• 12-month contract with the potential for permanent employment.

• Full-time position: 37.50 hours per week.

• Occasional overtime may be required to support project requirements.

• Hybrid model: 3 days per week on-site, subject to change.

Responsibilities:

Vault & Secrets Management

• Provide operational support for HashiCorp Vault-based secrets and key management.

• Administer and support HashiCorp Vault environments across production and non-production environments.

• Manage the lifecycle of secrets, keys, tokens, leases, and service accounts.

• Maintain authentication mechanisms, role-based access control, and access control lists aligned with least privilege principles.

• Perform tenant onboarding and offboarding activities.

• Troubleshoot and optimize Vault performance.

• Support integrations with AWS KMS and external secret platforms.

• Manage Vault upgrades, testing, and currency roadmaps.

Cryptography & HSM Operations

• Support HSM-integrated root of trust operations.

• Support Vault-HSM integration, including Thales LUNA HSM environments.

• Manage auto-unseal functionality, key rotation activities, and secure key handling practices.

• Coordinate firmware upgrades and disaster recovery processes.

• Support post-quantum cryptography readiness, assessments, transition strategies, risk identification, and mitigation.

• Maintain inventories of cryptographic keys, secrets, certificates, and algorithms.

• Identify deprecated or weak cryptographic implementations.

Certificate & PKI Management

• Manage TLS/SSL certificate lifecycle activities, including creation, renewal, revocation, replacement, installation validation, and incident troubleshooting.

• Ensure certificate lifecycle service level agreement adherence.

• Maintain certificate inventory and ownership records.

• Support PKI documentation, compliance activities, audits, and governance requirements.

• Design, implement, and operate certificate lifecycle automation solutions.

• Implement automation using ACME protocols, Vault PKI engine, Kubernetes cert-manager, and cloud-native tools.

• Maintain certificate inventory, automation status records, and monitoring systems for renewal failures and expiry risks.

• Enforce certificate standards, security best practices, least privilege principles, and segregation of duties.

Monitoring, Compliance & Security

• Perform cryptographic monitoring, reporting, governance, and risk management activities.

• Conduct proactive monitoring and health checks.

• Deliver KPIs and service metrics related to Vault operations, PKI, certificate automation, cryptographic risks, and post-quantum cryptography readiness.

• Utilize monitoring and reporting tools, including Dynatrace, SiteScope, Rapid7, Power BI, and Microsoft Excel.

• Support audits, compliance reviews, and risk assessments.

• Ensure compliance with security and regulatory requirements.

• Support backup, disaster recovery, security investigations, and audit activities.

• Maintain the availability and resilience of cryptographic services.

• Participate in information security incident handling, incident response activities, and alert triage.

• Identify and address network security gaps.

Operational Support & Continuous Improvement

• Support configuration changes and change management processes.

• Coordinate off-hours support activities.

• Develop and maintain documentation and operational runbooks.

• Facilitate knowledge sharing across teams.

• Drive continuous improvement and operational maturity initiatives.

What you will need to succeed:

Required qualifications

Experience

• 1-3 years of experience.

• Experience administering and supporting HashiCorp Vault environments.

• Experience with compliance and audit frameworks.

• Experience operating in a 24/7 business-as-usual environment.

Technical and professional skills

• Ticket management skills.

• Cryptography knowledge and experience.

• HashiCorp Vault administration and operations.

• Information security incident handling.

• Hardware Security Modules knowledge and experience.

• TLS/SSL certificate management.

• Public Key Infrastructure (PKI) knowledge and experience.

• Secrets management platform experience, including HashiCorp Vault.

• Cloud platform experience.

• Automation experience, including APIs, scripting, and CI/CD integrations.

• Experience with monitoring and reporting tools.

• Strong understanding of cryptographic principles and lifecycle management.

• Knowledge of RBAC, least privilege principles, and access control.

• Problem-solving and troubleshooting skills.

Preferred qualifications

Experience

• Experience in regulated industries such as insurance or financial services.

Technical and professional skills

• Experience with Thales LUNA HSM.

• Experience with AWS cloud platforms.

• Experience with Kubernetes and cert-manager.

• Exposure to Post-Quantum Cryptography (PQC).

Soft skills

• Resourceful.

• Forward-thinking.

• Problem-solving.

• Ability to enable knowledge sharing across teams.

• Ability to drive continuous improvement and operational maturity initiatives.

Why Recruit Action?

Recruit Action (agency permit: AP-2504511) provides recruitment services through quality support and a personalized approach. As part of the screening process, some applications may be reviewed using artificial intelligence tools. Only candidates who meet the hiring criteria will be contacted.

Requirements
—