Cryptography Operations Team Lead US

Ready to strengthen cryptography operations across HSBC’s US platforms?

Why HSBC

HSBC is one of the largest banking and financial services organizations in the world. Guided by our purpose of open up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.

The Opportunity

As Cryptography Operations Team Lead you’ll own US cryptography operations delivery and day-to-day management of cryptographic operations across HSBC platforms. The role is central to operational excellence for cryptography hardware and software, key and certificate lifecycle processes and the controls that underpin compliance, resilience and auditability. You’ll oversee the cryptographic hardware used in our environments including configuration, crypto-load and installation into data centers and or external hosting. The role directly supports cryptographic solutions being implemented to a standard aligned to the bank’s risk appetite. You’ll work across Security, Engineering and Governance and controls teams to ensure consistent outcomes and evidence for audit. The new Data Center at 545 Washington Blvd, New Jersey will require in person on-site support from this role.

Strengthening US Crypto Operations

This role sits at the point where strong cryptography meets dependable operations - ensuring controls work in practice, not just on paper. You’ll help keep key and certificate lifecycles robust, services stable and evidence clear for audit and regulatory expectations. If you want to shape how cryptography is delivered and run across HSBC’s US platforms and support the new New Jersey data center operation we’d like to hear from you.

As our Cryptography Operations Team Lead US, you will: 

• Own end-to-end delivery and day-to-day management for US cryptography operations across HSBC platforms
• Oversee rollout, configuration management, upgrades and end-of-life procedures for approved cryptographic hardware and software
• Manage HSM key and HSM certificate lifecycle operations including rotation, renewal and revocation-related workflows
• Establish and maintain crypto inventory controls to support resilience, compliance and auditability
• Run incident management for cryptography services and issues including key and certificate failures and HSM or KMS disruptions
• Deliver post-incident remediation and ensure runbooks are created, maintained and consistently followed
• Embed internal controls for crypto infrastructure and key management in partnership with the internal control function
• Advance automation and engineering standards for cryptographic workflows including approvals, templated configurations, deployment guardrails and monitoring and alerting

You´ll likely have the following qualifications to succeed in this role:

• Bring substantial hands-on experience in cryptography operations including PKI concepts, key management and cryptographic algorithms and protocols
• Apply proven experience with HSM and KMS operational patterns including provisioning and configuration, access controls and key lifecycle practices
• Demonstrate capability to design and troubleshoot cryptographic failures across dev, pre-prod and prod environments
• Use strong knowledge of encryption devices and standards including HSM and software cryptography, plus data at rest and data in motion encryption
• Apply working knowledge of Unix or Linux platforms plus scripting and basic programming in Java or Python
• Bring experience working across cloud environments including AWS, Azure, GCP or Alibaba
• Show understanding of security monitoring, audit evidence and control outcomes for cryptographic control environments
• Partner effectively with control owners and operational teams to maintain compliance using collaboration tools such as JIRA, Confluence, MS Teams or SharePoint