What You Will Do
Manage the lifecycle of cryptographic keys, digital certificates, and application secrets, including rotation, renewal, revocation, and access management.
Operate, monitor, and support Hardware Security Module (HSM) infrastructures and other cryptographic platforms.
Help ensure high availability, operational stability, and compliance of security-critical infrastructure.
Support and execute cryptographic key ceremonies.
Investigate and resolve incidents related to encryption, authentication, certificates, key management, and secrets management.
Support PKI and certificate lifecycle management activities.
Work with HashiCorp Vault or comparable technologies for secure application secrets management.
Identify security risks and contribute to structural improvements and automation.
Collaborate with engineering and application teams to integrate cryptographic services securely into their environments.
Act as a trusted subject matter expert on cryptographic technologies, standards, algorithms, and security best practices.
You will also have the opportunity to contribute to strategic security initiatives in areas such as:
Post-Quantum Cryptography – assessing cryptographic risks and helping organizations prepare for the transition towards quantum-resistant solutions.
Crypto Agility – improving the ability to replace, rotate, and manage cryptographic algorithms, keys, and certificates efficiently.
PKI & Certificate Readiness – preparing applications and platforms for evolving certificate and Extended Key Usage requirements.
HSM Lifecycle Management – supporting upgrades, migrations, configuration, and renewal of HSM platforms.
Key Management – improving governance and operational processes around cryptographic keys.
Security Automation – automating certificate, key, and secrets management processes where possible.
Platform Integration – integrating cryptographic and security services into broader enterprise technology environments.
What We Are Looking For
Experience
5+ years of relevant professional experience within IT Security, cybersecurity, cryptography, PKI, security infrastructure, or key management.
Strong hands-on experience in technically complex and business-critical IT environments.
Experience operating or supporting high-availability security infrastructure.
Experience working with multiple technical and business stakeholders.
Previous experience within financial services or another highly regulated environment is strongly valued.
Experience working in Agile environments is considered an advantage.
Business & Technical Skills
We are looking for a professional with strong knowledge in several of the following areas:
Hardware Security Modules (HSMs)
Public Key Infrastructure (PKI)
Digital certificates and certificate lifecycle management
Cryptographic key management
HashiCorp Vault or similar secrets management platforms
Cryptographic algorithms and standards
Encryption and authentication technologies
High-availability security infrastructure
Security and access management
Security compliance and regulatory requirements
Cryptographic key ceremonies
Hands-on experience with enterprise HSM technologies such as nCipher/Entrust or comparable platforms is a strong advantage.
Knowledge of the following is also valuable
NIST cryptographic standards and recommendations
PCI-DSS and other security frameworks
European financial services security and regulatory requirements
Python, Bash, or other scripting languages
Security process automation
IT Service Management tools such as ServiceNow
Agile methodologies and tooling
Cryptography & Security Expertise
We are particularly interested in professionals with practical expertise in one or more of the following domains:
Hardware Security Modules
PKI
Certificate Management
Cryptographic Key Management
Secrets Management
HashiCorp Vault
Cryptographic Standards
Post-Quantum Cryptography
Crypto Agility
Key Ceremonies
Encryption & Authentication
Security Infrastructure
The ability to combine deep technical expertise with an understanding of business, regulatory, and operational requirements is particularly important for this role.
Soft Skills
Strong analytical and problem-solving skills.
Proactive and able to identify risks and improvement opportunities.
Excellent communication and stakeholder management skills.
Comfortable translating complex security requirements into practical technical solutions.
Able to balance security, compliance, operational stability, cost, and usability.
Collaborative and comfortable working with security teams, architects, application owners, developers, and infrastructure specialists.
Able to work independently while contributing effectively within a specialized team.
Comfortable operating in environments where technologies, threats, and regulatory expectations continue to evolve.
Strong focus on quality and production stability.
Client-oriented and pragmatic in your approach to solving security challenges.
Languages
English: fluent spoken and written.
French: fluent spoken.
Dutch: considered an advantage.
Working Model
This is a hybrid role based in Belgium.
Approximately 50% on-site and 50% remote working is expected.
Flexibility to work at client locations when required.
Why Join Capco?
Work on complex cybersecurity and cryptography initiatives within the financial services industry.
Develop deeper expertise in areas such as HSMs, PKI, secrets management, crypto agility, and Post-Quantum Cryptography.
Work alongside experienced security, business, and technology professionals.
Contribute to highly relevant security challenges where technology, regulation, and operational resilience come together.
Be part of an international consulting environment with opportunities to learn, develop, and broaden your expertise.
Work on assignments where you can combine hands-on technical expertise with advisory responsibilities and strategic security initiatives.
