Crypto Engineer

As a Crypto Engineer at Transaction Network Services (TNS), you serve as the Cryptographic Custodian for Region 3 (Asia-Pacific), supporting secure operation and management of TNS cryptographic infrastructure. You work closely with global Cryptography and Security Engineering teams to ensure the integrity, confidentiality, and availability of cryptographic assets supporting critical payment and network services.

What you'll do

• Serve as the Cryptographic Custodian for Region 3 (Asia-Pacific), supporting Region 1 (Americas) and Region 2 (Europe)
• Provide development and testing support across APAC time zones
• Provide local operational support for HSM systems requiring physical access for administration, troubleshooting, and maintenance of Hardware Security Modules to ensure business continuity and disaster recovery
• Assist with certificate lifecycle management including issuance, renewal, revocation, and automation
• Participate in security audits, compliance activities, and documentation related to cryptographic controls
• Collaborate with Security Engineering and Operations teams to support cryptographic infrastructure and production services
• Support tasks across wider security requirements

What you bring

• A degree in computing science or equivalent qualification
• Strong understanding of cryptography, key management, and security best practices
• Ability to work in environments requiring dual control and strict security procedures
• Strong written and verbal English communication skills
• Ability to work independently while coordinating with global teams
• Experience in cryptography or security engineering
• Experience with Hardware Security Modules (HSMs) from vendors such as Thales, Utimaco, Futurex, nCipher or similar
• Experience with TLS/SSL certificates and PKI environments
• Willingness to support occasional after-hours maintenance activities

Nice to have

• Experience in payments, financial services, or regulated environments
• Familiarity with security frameworks such as PCI DSS or P2PE