Cryptography & Key Management Security Engineer

About the role

Capco, a global business and technology consultancy for financial services and energy, is looking for an experienced Cryptography & Key Management Security Engineer in Brussels. The role combines hands-on operational work with security advisory and strategic projects, supporting complex, business-critical security environments in the financial services sector.

Key responsibilities

• Manage the lifecycle of cryptographic keys, digital certificates and application secrets, including rotation, renewal, revocation and access control.
• Operate, monitor and support HSM infrastructures and other cryptographic platforms, ensuring high availability, stability and compliance.
• Support and execute cryptographic key ceremonies and PKI certificate lifecycle management.
• Investigate and resolve incidents related to encryption, authentication, certificates, keys and secrets.
• Use HashiCorp Vault or similar tools for secrets management and help integrate cryptographic services securely.
• Contribute to strategic initiatives such as post-quantum cryptography, crypto agility, PKI readiness, HSM lifecycle management, security automation and platform integration.

Required profile

• 5+ years of experience in IT security, cryptography, PKI, security infrastructure or key management.
• Hands-on experience in complex, business-critical environments and with high-availability security infrastructure.
• Experience with multiple technical and business stakeholders; previous work in financial services or a highly regulated environment is strongly valued.
• Agile experience is an advantage; fluent English, fluent French, Dutch an advantage.

Required skills

• HSMs, PKI, digital certificates, cryptographic key management and secrets management.
• HashiCorp Vault or similar platforms; nCipher/Entrust HSMs are a strong advantage.
• NIST standards, PCI-DSS, European financial services regulations, Python/Bash scripting, ServiceNow and agile tooling are valuable.

Working model

• Hybrid role in Belgium, about 50% on-site and 50% remote, with flexibility to work at client sites when required.