Senior Cryptography Engineer

As a Senior Cryptography Engineer, you’ll protect NewDay’s payment processing, customer data, and internal systems through robust, scalable cryptographic controls. You’ll design, build, and automate key management, certificate lifecycle, and HSM governance to reduce operational risk and enable secure developer self-service. This role directly supports business-critical platforms, ensuring strong security assurance across financial services at scale while helping shape NewDay’s long-term cryptographic strategy.

How you’ll contribute

• Key lifecycle tooling: Build, implement, and manage tooling for key generation, distribution, backup, automated rotation, and secure deletion across hybrid cloud environments.
• Certificate automation: Develop self-service certificate issuance workflows integrated with CI/CD pipelines; improving self-service coverage.
• PKI tooling: Maintain certificate authority infrastructure, trust store management and validation processes.
• Integration patterns: Build certificate provisioning patterns for containerised applications, API gateways and service meshes.
• Algorithm governance: Support migration away from deprecated algorithms through automation and developer tooling.
• Cloud KMS integration: Configure and maintain integrations with Cloud KMS services.
• HSM admi...