Senior Information Security Engineer: PKI/Systems Security

At Jack Henry, we deliver technology solutions that are digitally transforming and empowering community banks and credit unions to provide enhanced and streamlined user experiences to their customers and members. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us. We can't do it without you.

We are hiring an Information Security Engineer to join our growing Systems Security team. The Systems Security team designs, implements, and manages security infrastructure solutions deployed across the enterprise. This position directly supports our cryptographic key management program by implementing and operating secure key management solutions, including PKI, HSM, and other key escrow services. This position will focus on developing cryptographic solutions and standards for the business, improving efficiencies, and automation.

Successful candidates should be self-motivated and willing to take on challenges, able to multi-task, and have strong communication and customer service skills. You will join a strong team of ten already performing to a very high level and having fun in the process. You'll also work closely with your peers in Network Security, Data Security, Identity Management, and Application Security to achieve our comprehensive security objectives. There is an on-call rotation and you may potentially work nights and weekends based on business needs.

This position can be based to work out of any Jack Henry office or 100% remote from any US location. Travel up to 5% for team meetings may be required. The salary range for this position is $90-140k, depending on candidate experience and geographic location.

What you'll be responsible for:

• Develops the security of electronic information and establishes security systems, policies and procedures to prevent system compromise or infiltration.
• Reviews PKI Standards and Practice Statement and aligns with enterprise strategy.
• Develops and implements standards for appropriate security checkpoints and encryption methods.
• Assesses the impact on the business caused by theft, destruction, alteration, or denial of access to information.
• Investigates, recommends and monitors implementation of new security products and services. Participates in product Change Control Boards and work with other JHA departments to ensure security of products and services.
• Monitors and evaluates PKI infrastructure.
• Monitors and evaluates internal and external security threats. Research security threats and implement appropriate changes to prevent company and customer data assets from being compromised.
• Manages high level projects that drive current security initiatives and support the security solutions.
• Follows up on security findings from security-related reviews and other third-party reviews.
• May perform other duties as assigned.

What you'll need to have:

• Minimum of 6 years of information security or compliance experience.
• Must have experience with any of the following: Public Key Infrastructure (PKI), SCCM or other configuration management tool, Hardware Security Module (HSM) management, FIPS 140-2 compliance.

What would be nice for you to have:

• Bachelor's degree.
• Experience implementing and supporting Public Key Infrastructure in a multi-cloud/multi-datacenter environment.
• Experience implementing and supporting hardware security modules in a multi-cloud/multi-datacenter environment.
• Experience with providing guidance and education on cryptographic concepts and implementation in software development.
• Experience designing and deploying emerging cryptographic technologies.
• Experience with Python, C#, PKCS#11, and PowerShell.
• Experience with Linux, Git, Jenkins.
• CISSP, GIAC, or CCSP certification preferred.

If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're eager to meet motivated people who align with Jack Henry's mission and can contribute to our company in a variety of ways.

Why Jack Henry?

At Jack Henry, we pride ourselves through our motto of, "Do the right thing, do whatever it takes, and have fun." We recognize the value of our associates and believe much of our company's strength and success depends on their well-being.

We demonstrate our commitment by offering outstanding benefit programs to ensure the physical, mental & financial well-being of our people is always met.

Culture of Commitment

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Rising to meet challenges and seeking opportunities is part of who we are as an organization. Our culture has helped us stay strong through challenging times and we credit our dedicated associates for our success. Visit our Corporate Responsibility site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders.

Equal Employment Opportunity

At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law.

No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations.

Requests for full corporate job descriptions may be requested through the interview process at any time.