Infrastructure Engineer - Crypto Lab

SALARY: £48,987-£59,873

LOCATION(S): Edinburgh, Manchester, Leeds, Bristol

HOURS: Full-time

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites

About this opportunity

The Chief Security Office (CSO) is responsible for protecting the organisation, its customers, and colleagues by delivering secure, resilient, and compliant technology services. Within CSO, the Secrets, Keys and Certificates (SKC) team provides the cryptographic foundations that underpin the bank's digital services, cloud platforms, applications, and emerging technologies.

The team is responsible for delivering and operating enterprise cryptographic capabilities across public cloud and on-premises environments, ensuring the secure management of secrets, encryption keys, certificates, and digital identities. We work closely with engineering teams, platform providers, architects, and security specialists to enable secure innovation while meeting regulatory and security requirements.

This is an exciting opportunity to join a highly skilled team at the centre of the organisation's security strategy, helping to develop and deliver core cryptographic services that support business-critical platforms and products.

What you'll be doing:

• Designing, implementing, and supporting enterprise Secrets, Keys and Certificates (SKC) services across multi-cloud and on-premises environments.
• Delivering secure cryptographic solutions that enable application teams to protect data, identities, and business transactions.
• Supporting the lifecycle management of secrets, encryption keys, and digital certificates through automated and self-service capabilities.
• Collaborating with engineering, infrastructure, architecture, and security teams to integrate cryptographic services into new and existing platforms.
• Driving the adoption of security procedures, cryptographic standards, and secure-by-design principles across technology teams.
• Contributing to the development and evolution of cloud-native security capabilities, including key management, certificate automation, and secrets management services.
• Supporting operational resilience through monitoring, incident management, problem resolution, and continuous service improvement activities.
• Working with internal team members and external vendors to deliver strategic security initiatives and platform improvements.
• Crafting and maintaining technical documentation, standards, and mentorship to support effective service adoption and governance.
• Finding opportunities to simplify processes, improve automation, and enhance the overall developer experience for consumers of cryptographic services.
• Contributing to regulatory, audit, and risk management activities relating to cryptographic controls and security services.
• Supporting innovation initiatives and emerging technologies, including cloud transformation, digital identity, and distributed ledger platforms.