
Cyber Security Consultant (Encryption)
- United Kingdom
- Permanent
- Full-time
- Planning – Engage with customers to gather requirements, define implementation scope, and develop detailed project plans, ensuring alignment with security and compliance objectives.
- Solution Design – Architect secure key management, encryption, and access control frameworks using Thales HSM and CM, ensuring adherence to best practices and industry standards.
- Implementation & Integration – Execute hands-on installation, configuration, and integration of HSMs, CM, and related cryptographic solutions into customer environments, including validation and testing.
- Consultation – Provide training and support, best practice recommendations during projects
- Documentation & Knowledge Transfer – Produce detailed design guides, configuration documentation, and operational runbooks; deliver structured knowledge transfer sessions to customer technical teams.
- Stakeholder Engagement – Present solutions, progress updates, and best practices to both technical and executive stakeholders, internally and externally.
- Strong experience in implementing encryption and key management solutions
- Experience in onsite and remote projects delivery model
- Thales HSM Expertise – Hands-on product knowledge and certification in general-purpose and payment HSMs, preferably Luna and payShield, with proven experience in secure deployment, configuration, and integration.
- CipherTrust Suite Proficiency – Strong working knowledge of CipherTrust Manager (CM), CipherTrust Transparent Encryption (CTE), CipherTrust Cloud Key Manager (CCKM), and other related Thales security modules, including policy creation and enforcement.
- Database Encryption Solutions – Experience implementing encryption for databases such as Microsoft SQL Server (TDE) and Oracle (TDE), ensuring secure data-at-rest protection.
- Cryptographic Protocols – Practical understanding and hands-on experience with KMIP, PKCS#11, REST API, SNMP, and TLS for secure communications and integrations.
- Key & Certificate Lifecycle Management – Proficiency in key generation, distribution, rotation, revocation, and certificate lifecycle processes in compliance with industry best practices.
- Automation & Integration – Experience in programming or scripting languages (e.g., Python, Java, PowerShell, or similar) for automation of deployment tasks, integration with enterprise systems, and operational efficiency.
- Technical Documentation – Strong ability to capture technical requirements, produce detailed implementation guides, and write high-quality technical response papers for customer and internal audiences.
- Knowledge of Functional Modules, API developments.
- Experience working on cloud environments: AWS, Azure, Oracle cloud
- Experience of working on Infrastructure E.g. MSSQL DB, Oracle DB/Storage devices
Build your talents in another domain of Thales Group, discovering new products, new customers, new country or go to a more complex Solution
Choose between a technical expertise or a leadership path
Build an international career within a leading Engineering Group#LI-SW1In line with Thales' Baseline Security requirements, candidates will be asked to provide evidence of identity, eligibility to work in the UK and employment and/or education history for up to three years. Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the Defence Business Services National Security Vetting (DBS NSV) Agency.At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.Thales UK is committed to providing an inclusive and barrier-free recruitment process. We will provide reasonable adjustments and support to ensure neuro-diverse applicants or those with a disability or long-term condition can be their best during the recruitment process. To request an adjustment, if you need this job advert in an alternative format or if you have any questions about the recruitment process, please contact for mid to senior roles, or the for graduate and apprentice roles.Great journeys start here, apply now!