Cyber Security Consultant

Location: Remote UK, United Kingdom

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across the major industries of Aerospace, Defence, Security and Space. Your health and well-being matters to us and that’s why we offer you the flexibility to do what’s important to you; whether that’s part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.

**Cyber Security Consultant (Encryption)**

Remote with up to 70% travel

We are seeking an experienced Professional Services Consultant with deep expertise in Thales Hardware Security Modules **(HSM)**, CipherTrust Manager **(CM)**and **payShield solutions.**

Thales Cybersecurity Products are at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more.

Our Cyber Security Consultants are responsible for deploying and implementing our data security solutions in customer enterprise environments. You’ll be key in evaluating the security configuration assessment and measures and provides solutions on the management of cybersecurity and information risk to the clients.

This is a highly hands-on and technical role with extensive customer facing responsibilities. The individual will work with cross functional teams at customer sites focusing mainly on IT security, encryption, and key management, to install and configure our data security products.

**This role encompasses**:

- Planning - Engage with customers to gather requirements, define implementation scope, and develop detailed project plans, ensuring alignment with security and compliance objectives.
- Solution Design - Architect secure key management, encryption, and access control frameworks using Thales HSM and CM, ensuring adherence to best practices and industry standards.
- Implementation & Integration - Execute hands-on installation, configuration, and integration of HSMs, CM, and related cryptographic solutions into customer environments, including validation and testing.
- Consultation - Provide training and support, best practice recommendations during projects
- Documentation & Knowledge Transfer - Produce detailed design guides, configuration documentation, and operational runbooks; deliver structured knowledge transfer sessions to customer technical teams.
- Stakeholder Engagement - Present solutions, progress updates, and best practices to both technical and executive stakeholders, internally and externally.

**Right for this role?**
- Strong experience in implementing encryption and key management solutions
- Experience in onsite and remote projects delivery model

**Technical**
- Thales HSM Expertise - Hands-on product knowledge and certification in general-purpose and payment HSMs, preferably Luna and payShield, with proven experience in secure deployment, configuration, and integration.
- CipherTrust Suite Proficiency - Strong working knowledge of CipherTrust Manager (CM), CipherTrust Transparent Encryption (CTE), CipherTrust Cloud Key Manager (CCKM), and other related Thales security modules, including policy creation and enforcement.
- Database Encryption Solutions - Experience implementing encryption for databases such as Microsoft SQL Server (TDE) and Oracle (TDE), ensuring secure data-at-rest protection.
- Cryptographic Protocols - Practical understanding and hands-on experience with KMIP, PKCS#11, REST API, SNMP, and TLS for secure communications and integrations.
- Key & Certificate Lifecycle Management - Proficiency in key generation, distribution, rotation, revocation, and certificate lifecycle processes in compliance with industry best practices.
- Automation & Integration - Experience in programming or scripting languages (e.g., Python, Java, PowerShell, or similar) for automation of deployment tasks, integration with enterprise systems, and operational efficiency.
- Technical Documentation - Strong ability to capture technical requirements, produce detailed i