IT Production Engineer - Key Certificate Manager - HQ Brussels

Over deze functie

**YOUR JOB IN A NUTSHELL**

Join our **Key, Certificate, and Key Management squad** within the **Production Security BE tribe**, a team of **15 experts** based in Belgium. As a **Cryptographic Security Expert**, you’ll specialize in the lifecycle management of cryptographic keys, certificates (internal/group/public), and application secrets via **Hashicorp Vault**.

Your mission? To secure electronic transactions, authentications, and cloud-hosted applications while ensuring full compliance with **EU/Group regulations (PSD2, PCI)** and industry standards.

You’ll operate and support **Hardware Security Modules (HSMs) like Adyton and nCipher**, enabling a trustworthy environment for both internal and external customers. Here, you’ll be the go-to partner for stakeholders, delivering **cost-efficient, reliable security solutions** that keep the bank and its clients safe.

**AND IN DETAIL**

**General**

* Manage the lifecycle of **cryptographic keys, digital certificates, and application secrets** including rotation, revocation, and access control.
* Monitor and maintain **HSM infrastructures (Adyton, nCipher, mainframe TKE)** to ensure high availability and compliance.
* Troubleshoot incidents and collaborate with teams to resolve security gaps in authentication, encryption, or secret storage.
* Act as a **Crypto Design Authority**, advising on cryptographic standards, algorithms, and best practices (e.g., **NIST, PCI-DSS, PSD2**).

**Lead or contribute to strategic projects, including:**

* Post-Quantum Cryptography: Assess risks and contribute to the migration of quantum-resistant solutions.
* EKU Readiness: Prepare systems for Extended Key Usage (EKU) compliance.
* **HSM Lifecycle Management (LCM)**: Contribute to the design of service patterns and infrastructure requirements.
* **PKI Convergence**: Streamline Public Key Infrastructure across the bank.
* **Crypto Agility**: Design flexible frameworks to adapt to evolving threats/standards and assist in automating workflows (e.g., **IoT device onboarding**).
* **Platform Integration**: Align with Group tools (**Certis, Horizon**).
* Partner with **COE Security, Group Security, IT architects, and IT application owners** to translate regulatory and business requirements into technical solutions.

**WHAT WE HAVE TO OFFER**

**OUR IMPACT**

As a company, we implement concrete and sustainable solutions to reduce our environmental footprint, such as saving paper and resources, recycling our waste, encouraging the use of green transport, buildings that are designed and managed to limit our impact, etc.

**YOUR CAREER PERSPECTIVES**

The departments that make up BNP Paribas Fortis cover a wide range of activities. You will therefore have many opportunities for ‘horizontal’ and ‘vertical’ career development.

**OUR OFFER**

You’ll enjoy a permanent contract with an attractive salary package. You'll be working at our Brussels headquarters. We support your work-life balance by offering a mixture of in-person and remote work (50%), among other things.

**OUR ENGAGEMENT**

At BNP Paribas Fortis, we want to attract and retain all talent, whatever their gender, age, background or sexual orientation, and irrespective of whether they are living with a disability, as all persons have their own experiences and their own identity. All of our full-time vacancies are also open to candidates wishing to work on an 80% or 90% full-time equivalent basis.

If the function is categorized as a banking services provider function (cf. Law of 22 April 2019 establishing an oath and a disciplinary regime for the banking sector), you will also need to provide us with a 'certificate of absence of professional ban' from the FSMA confirming that you are not professionally disqualified.