About the project

• Global Defense Engineering is responsible for fielding solutions that help defend HSBC against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across HSBC, to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape. The function operates under the vision: “Enabling HSBC to be safely successful everywhere the firm chooses to do business”.
• The Machine Identity capability owner reports to the head of cryptography.

Your responsibilities

• Collaborate with IT, legal, compliance, and risk management teams to align PKI strategies with overall business aims and regulatory requirements.
• Own the strategy for public key infrastructures (PKI) and SSH key crytpographic quality.
• Set the requirements for PKI and SSH standards and policies.
• Deliver strategy and controls to the overall capability owner’s strategy.
• Direct the compliance and security posture for machine identity solutions.
• Manage the staff involved in the deployment and long term management of PKI solutions, working collaboratively with key stakeholders to deliver services aligning to the business’ requirements.

Our requirements

• Strong understanding of cryptographic principles, algorithms, and protocols.
• Proficiency in strategic direction of PKI solution delivery.
• Experience with cloud-based PKI solutions and integration with cloud services (e.g., AWS, Azure).
• Familiarity with regulatory requirements and standards related to PKI and information security.
• Demonstrated experience in information security, with a focus on PKI and cryptographic services.
• Proven experience in designing, implementing, and managing PKI solutions in a large organization, preferably within the financial sector or aerospace/defence industry.
• Experience with HSMs, certificate authorities, and PKI-related protocols (e.g., X.509, SSL/TLS, OCSP, SCEP).
• Effective communication skills, with the ability to convey complex technical concepts to non-technical stakeholders.

Technologies we use

What we offer

• Competitive salary

• Annual performance-based bonus

• Additional bonuses for recognition awards

• Multisport card

• Private medical care

• Life insurance

• One-time reimbursement of home office set-up (up to 800 PLN)

• Corporate parties & events

• CSR initiatives

• Nursery discounts

• Financial support with trainings and education

• Social fund

• Flexible working hours

• Free parking