Cryptography & Key Management Security Engineer

Capco is a global business and technology consultancy specializing in the financial services and energy industries. We bring together industry knowledge, technology expertise, and an innovative mindset to support clients in complex transformation initiatives.

At Capco, you will be part of a collaborative and entrepreneurial environment where you can work alongside experienced professionals, expand your expertise, and contribute to impactful projects across the financial services industry.

We are looking for an experienced Cryptography & Key Management Security Engineer with strong expertise in cryptographic technologies, PKI, Hardware Security Modules (HSMs), and secrets management.

This is a specialist role for security professionals who enjoy combining hands-on operational responsibilities with security advisory and strategic project work.

As a Cryptography & Key Management Security Engineer, you will support complex and business-critical security environments within the financial services sector. You will contribute to the secure management of cryptographic keys, digital certificates, and application secrets while helping organizations strengthen their cryptographic capabilities and prepare for future security challenges.

You will collaborate with security specialists, architects, application teams, infrastructure experts, and other stakeholders to translate security and regulatory requirements into secure, scalable, and operationally feasible solutions.

• →

  Manage the lifecycle of cryptographic keys, digital certificates, and application secrets, including rotation, renewal, revocation, and access management.

• →

  Operate, monitor, and support Hardware Security Module (HSM) infrastructures and other cryptographic platforms.

• →

  Help ensure high availability, operational stability, and compliance of security-critical infrastructure.

• →

  Support and execute cryptographic key ceremonies.

• →

  Investigate and resolve incidents related to encryption, authentication, certificates, key management, and secrets management.

• →

  Support PKI and certificate lifecycle management activities.

• →

  Work with HashiCorp Vault or comparable technologies for secure application secrets management.

• →

  Identify security risks and contribute to structural improvements and automation.

• →

  Collaborate with engineering and application teams to integrate cryptographic services securely into their environments.

• →

  Act as a trusted subject matter expert on cryptographic technologies, standards, algorithms, and security best practices.

You will also have the opportunity to contribute to strategic security initiatives in areas such as:

• →

We are particularly interested in professionals with practical expertise in one or more of the following domains:

• Hardware Security Modules

• PKI

• Certificate Management

• Cryptographic Key Management

• Secrets Management

• HashiCorp Vault

• Cryptographic Standards

• Post-Quantum Cryptography

• Crypto Agility

• Key Ceremonies

• Encryption & Authentication

• Security Infrastructure

The ability to combine deep technical expertise with an understanding of business, regulatory, and operational requirements is particularly important for this role.

• Strong analytical and problem-solving skills.

• Proactive and able to identify risks and improvement opportunities.

• Excellent communication and stakeholder management skills.

• Comfortable translating complex security requirements into practical technical solutions.

• Able to balance security, compliance, operational stability, cost, and usability.

• Collaborative and comfortable working with security teams, architects, application owners, developers, and infrastructure specialists.

• Able to work independently while contributing effectively within a specialized team.

• Comfortable operating in environments where technologies, threats, and regulatory expectations continue to evolve.

• Strong focus on quality and production stability.

• Client-oriented and pragmatic in your approach to solving security challenges.

• English: fluent spoken and written.

• French: fluent spoken.

• Dutch: considered an advantage.

• This is a hybrid role based in Belgium.

• Approximately 50% on-site and 50% remote working is expected.

• Flexibility to work at client locations when required.