Data Security and Encryption Engineer

Thales is hiring a Data Security and Encryption Engineer. Level rates it ; you can apply on Thales.

Level's read on this job

On Level's scale, this role is Little AI ●○○○: aI is not part of the work.
Tools and skills the posting cites include Hsm, Kms and Tls.
Level classifies it as a senior role.
Level lists 3,600+ other open roles at Thales.

AI in this role

Design and implement enterprise security solutions involving encryption, cryptographic key management, and infrastructure.

HsmKmsTlsSsl

Location: Praha, Czechia

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales in the Czech Republic employs over 400 people from 45 different nationalities. A total of 15 teams work on projects for government agencies, banking, mobile services and the Internet Of Things (IoT) technology. At the core of our business is the development of software which we configure and embed in a multitude of different devices and form factors. These include many kinds of payment cards, SIM cards, travel passes, secure eBanking devices, authentication tokens, machine identification modules (MIM), and secure ID documents including ePassports, eID and eHealth cards, as well as eDriving licenses. Because of the international environment surrounding us every day, it comes as no surprise that English is our official corporate language.

We are looking for an experienced Encryption, Key Management and HSM Engineer responsible for designing, implementing, integrating, and supporting enterprise security solutions involving encryption, cryptographic key management, databases, and network infrastructure. The ideal candidate should have strong hands-on experience with cryptographic technologies and the ability to troubleshoot complex integrations across applications, databases, HSMs, and networks.

Must-Have Skills

5+ years of experience in cybersecurity, infrastructure security, cryptography, key management or related technologies.
Relevant security certifications such as CISSP, CCSP, Security+, vendor-specific HSM/KMS certifications, etc
Experience in customer-facing consulting, implementation or technical support.
Travel 50% of time
EU security clearance mandatory

Encryption & Cryptography

Strong understanding of encryption concepts and cryptographic fundamentals.
Hands-on knowledge of symmetric and asymmetric encryption.
Understanding digital signatures, certificates and PKI.
Understanding of encryption at rest and encryption in transit.
Knowledge of TLS/SSL and certificate lifecycle management.

Key Management

Strong understanding of cryptographic key lifecycle management.
Key generation, rotation, storage, backup/recovery, archival and destruction.
Experience with Key Management Systems (KMS).
Understanding of key hierarchies, key wrapping and separation of duties.
Knowledge of KMIP is highly desirable.

Networking

Good understanding of TCP/IP, DNS, routing, firewalls and load balancers.
Experience troubleshooting connectivity between applications, databases, KMS and HSM infrastructure.
Understanding of TLS, ports, certificates and network-level troubleshooting.
Ability to use tools such as ping, telnet, nc, curl, openssl, tcpdump or Wireshark.

Operating Systems / Troubleshooting

Strong troubleshooting experience across Linux, networking, databases and security infrastructure.

Good Linux/Unix administration skills.
Basic Windows Server administration.
Strong troubleshooting and log-analysis capabilities.
Ability to analyze issues across application → network → database → KMS → HSM layers.
Experience with AWS KMS, Azure Key Vault, OCI or Google Cloud KMS.

Nice-to-Have Skills

Experience with Thales Luna HSM / Luna Network HSM.
Experience with Thales CipherTrust Manager / Data Security Platform.
Knowledge of PKCS#11, JCE, OpenSSL, CNG/CAPI.
Experience with KMIP implementations.
Experience with Oracle TDE / SQL Server TDE.
Knowledge of cloud and hybrid-cloud encryption architectures.
Experience with PKI, Certificate Authorities and certificate lifecycle automation.
Experience working with enterprise customers and supporting production environments.

Provide technical guidance on cryptographic key lifecycle and security best practices.

Check out our Atmoskop- https://www.atmoskop.cz/en/nazory-na-zamestnavatele/3077450-thales-dis-czech-republic-s-r-o

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!

How we rate this

Data Security and Encryption Engineer at Thales rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Data Security and Encryption Engineer is an open job at Thales.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in Praha.
The job was posted on September 25, 2026.
Seniority: senior.
Applications are handled by Thales. Apply on Thales

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

HsmKmsTlsSsl

Questions you could be asked

What's a project where you used Hsm hands-on?
Walk me through how you've used Kms in your day-to-day work.
What are the limits of Tls that you've run into, and how did you work around them?
What's a project where you used Ssl hands-on?

Adapt your resume

List these exact terms on your resume: Hsm, Kms, Tls, and Ssl. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get a free CV review Check your resume with the ATS resume checker