Senior Information Security Engineer: PKI/Cryptography

At Jack Henry, we deliver technology solutions that are digitally transforming and empowering community banks and credit unions to provide enhanced and streamlined user experiences to their customers and members. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us.

We are hiring a Senior Information Security Engineer to join our growing Systems Security team. The Systems Security team designs, implements, and manages security infrastructure solutions deployed across the enterprise. This position directly supports our cryptographic key management program by implementing and operating secure key management solutions, including PKI, HSM, and other key escrow services. This position will focus on developing cryptographic solutions and standards for the business, improving efficiencies, and automation.

This position may be worked remotely from of any of our office locations in Allen, TX; Birmingham, AL; Cedar Falls, IA; Charlotte, NC; Lenexa, KS; Louisville, KY; Monett, MO; Springfield, MO. May require occasional travel, up to 5% for meetings, trainings or conferences. Salary range for this position is $92,000-140,000, depending on candidate experience and geographic location.

All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity.

What you'll be responsible for:

Collaborate with engineering and development teams to integrate cryptographic services into new and existing applications and products.
Manage all aspects of cryptographic key lifecycles for enterprise systems and applications, ensuring compliance with the NIST framework across data centers, multi-cloud (Google Cloud Platform, AWS, Azure), and third-party environments.
Develop and automate solutions for key management and certificate lifecycle challenges.
Establish and maintain security policies, standards, and procedures for cryptographic products and services.
Lead high-level cryptographic security initiatives and ensure timely follow-up on findings from security reviews.
Participates in product Change Control Boards and work with other JHA departments to ensure security of products and services.
Research Post-Quantum Cryptography and prepare the infrastructure for a future transition to quantum-safe encryption.
May perform other job duties as assigned.

What you'll need to have:

Minimum of 6 years of information security or compliance experience.
Must have experience with any of the following: Public Key Infrastructure (PKI), Hardware Security Module (HSM) management, FIPS 140-2 compliancy.
Demonstrated experience with Data Security Manager and Security Key Lifecycle Manager platforms (e.g. Fortanix, Thales Luna, Cipher Trust, nCipher, IBM SKLM).
Experience with Public Cloud Hardware Security Modules (HSMs) on at least one major cloud platform (Google Cloud Platform, AWS, or Azure).
Strong background in Linux administration and a deep understanding of command-line tools and scripting.

What would be nice for you to have:

Experience with Fortanix, Thales Luna, CipherTrust, nCipher HSMs.
Experience in a highly regulated industry (e.g., finance, healthcare).
Experience implementing and supporting Public Key Infrastructure in a multi-cloud/multi-datacenter environment.
Experience implementing and supporting hardware security modules in a multi-cloud/multi-datacenter environment.
Experience with providing guidance and education on cryptographic concepts and implementation in software development.
Experience designing and deploying emerging cryptographic technologies.
Expertise in writing and interpreting Splunk queries for monitoring and troubleshooting.
Experience with Python, PowerShell, or other scripting automation tools.
Experience with Linux, Git, Jenkins.
CISSP, GIAC, or CCSP certification.
Bachelor's Degree.

If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're eager to meet motivated people who align with Jack Henry's mission and can contribute to our company in a variety of ways.

Why Jack Henry?

At Jack Henry, we pride ourselves through our motto of, "Do the right thing, do whatever it takes, and have fun." We recognize the value of our associates and believe much of our company's strength and success depends on their well-being.

We demonstrate our commitment by offering outstanding benefit programs to ensure the physical, mental & financial well-being of our people is always met.

Culture of Commitment

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Rising to meet challenges and seeking opportunities is part of who we are as an organization. Our culture has helped us stay strong through challenging times and we credit our dedicated associates for our success. Visit our Corporate Responsibility site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders.

Equal Employment Opportunity

At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law.

No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations.

Requests for full corporate job descriptions may be requested through the interview process at any time.