Connect to your Industry
Deloitte Global inspires leaders at every level. We believe in investing in you, helping you embrace leadership opportunities at every step of your career, and helping you identify and hone your unique strengths. We encourage you to grow by providing formal and informal development programs, coaching and mentoring, and on-the-job challenges. We want you to ask questions, take chances, and explore the possible.
Connect to your career at Deloitte
Deloitte drives progress. Using our vast range of expertise, that covers audit, risk advisory, and consulting services across tax, legal, business, technology and corporate finance, we help our clients become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.
What brings us all together at Deloitte? It’s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.
Connect to your opportunity
The Crypto Architect will implement enterprise Crypto Architecture in accordance with established and approved standards, and guidelines as well as update and refresh existing policies. This role requires an individual with hands-on experience with not only the technologies required, as well as the development of the policies and controls, but also the vision to pull it all together and deliver the sustainable crypto ecosystems for years to come. This will include development of detailed design/integration specifications and associated test scripts. The Crypto Architect should have a good understanding of the technologies and their application and should recognize the associated benefits and potential pitfalls. This individual must also have the vision and experience to recommend and curate the downstream communications and enforcement guardrails of the refined policies, standards, guidelines, and controls, as well as affect and enforce the necessary change throughout the global organization. This area is not limited to asymmetric or symmetric but will also incorporate obfuscation and aspects of data protection by encryption. They should be able to specify practical, cost-effective working processes that get the best out of the technology.
Core Responsibilities:
-
Help define the future state of Cryptographic Framework and Technologies – such as policies and technologies, and operations to develop a Center of Excellence for Member Firms to follow.
-
Perform an in-depth Gap Analysis of the current state towards future state charter
-
This includes Legal, Technical, Operational, and Governance aspects of the environment such as controls, products, and lifecycle best practices for optimization.
-
Understand and document the detailed end-to-end crypto lifecycles for both Symmetric and Asymmetric Key operations.
-
Design and implement secure public key infrastructure (PKI) systems for our global operations.
-
Design and implement secure pre-shared key (PSK) systems for our global operations.
-
Broad technology background is preferred to have to better understand and solve cryptography problems more efficiently.
-
Provide leadership and guidance to prepare the organization for the post-Quantum era.
-
Develop and maintain the organization's global PKI strategy.
-
Develop and maintain the organizations PSK strategy such as KMIP.
-
PKI subject matter expert to implement PKI requirements, architecture, design, implementation, and operations.
-
PSK subject matter expert to implement requirements, architecture, design, implementation, and operations.
- Review of large PKI implementation with hundreds of domains and certificate chains with third-party PKI products.
-
Review crypto technology designs with Global Infrastructure architects and engineers, focusing on security design, network architectures, security policies and standards, cybersecurity risk frameworks & data protection, taking local and regional regulatory requirements into account (e.g., residency & privacy).
-
Design, implement, and manage secure crypto systems, including the issuance and management of digital certificates and symmetric keys for global operations.
-
Ensure compliance with industry regulations and standards according to global and regional requirements.
-
Conduct risk assessments of crypto systems and recommend improvements to enhance security.
-
Collaborate with internal teams and external partners to ensure seamless integration of PKI systems across the organization.
-
Stay up to date with industry best practices and new technologies related to cryptography.
-
Provide technical leadership and guidance to cryptographic operation teams in different locations.
-
Develop and maintain technical documentation related to crypto systems and processes.
-
Work with Cybersecurity, Global Shared Services teams, and member firms on practical implementation of crypto architectures and capabilities.
-
Maintain and update Certificate Policies and Certificate Practices Statements.
-
Investigate, design and architect specific PKI cybersecurity controls as they are identified and required.
IAM responsibilities include interfacing with the Identity and Access Management (IAM) team to review significant new identity projects, ensuring that security is built into the architecture and that the products meet all our cybersecurity requirements and policies.
Connect to your skills and professional experience
-
An experienced Cryptography Architect who is highly skilled at implementing enterprise PKI services in a global deployment across 150 countries.
-
An appreciation of the business impacts of PKI and the relevant service elements is expected.
-
Relevant experience as an Architect, Security Architect, and/or similar role with responsibilities that cover enterprise PKI deployments and operations.
-
Experience in PKI components expertise such as:
-
Entrust eShield PKI
-
Microsoft Certificate Server and High Availability designs
-
Thales CipherTrust Manager
-
Venafi
-
Support of S/MIME
-
Support for Code Signing
-
Other cryptography products Security (i.e., Entrust, VeriSign, DigiCert, …)
-
The ideal candidate will have a deep understanding of cryptography, digital certificates, and certificate-based authentication, as well as experience in leading cryptographic projects in a large complex environment.
-
Experience such as Agile Methodology and participate in Agile projects.
-
Experience of the following in a highly complex and global organization:
-
Promoting business and/or cybersecurity strategies,
-
Working with individuals across different time zones and understanding cultural differences.
-
Strong problem-solving and analytical skills, with the ability to think outside the box.
-
Excellent written and verbal communication skills, with the ability to effectively communicate with both technical and non-technical stakeholders.
This professional MUST have the following core experiences:
-
Must have previously developed and operationalized Cryptographic Framework at the enterprise level.
-
Must have hands-on experience with both symmetric and asymmetric key operations and security best practices.
-
Must have hands-on experience in communicating and enforcing the related controls and technologies, including developing and expanding on current governance workflows and policies.
-
Must have experience planning and executing High Assurance ceremonies and knowing when they are applicable for Root CAs and intermediate CAs.
-
Must have hands-on experience implementing secure optimization of key and certificate lifecycles.
-
Must have direct experience implementing security guidelines at the enterprise level.
Connect to your service line - Enabling Functions
Collaboration is central to everything we do at Deloitte. Bringing your individual skills and experience, and sharing your specialist knowledge, is how you’ll make a far-reaching impact. Come join us.
Personal independence
Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
Connect with your colleagues
“Deloitte is changing the mentality to agile working and the diversity debate. In terms of actual goals and openness to different ways of working, the firm is leading the way.”
- Janice, Business and Financial Advisory
Connect to your agile working options
Location: UK Wide
Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when and how you work. You’ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritise your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
You’ll be joining one of our innovative virtual communities. Which means you’ll be part of the Deloitte Global team. You’ll spend most of your time working from home like all of your Global colleagues in the Enabling Functions, or in a local collaboration space when needed. Our hybrid-working model enables our people to collaborate, connect and innovate in both a virtual and physical capacity.
You’ll have all the support you need to succeed, including robust tech and home workstation set-up guidance, as well as access to a variety of flexible working spaces and all sorts of social activities for you to join. We’re continually innovating our working practices too, so you can expect to see new and exciting technology developments coming soon. The future of work is evolving fast and we’re already leading the way by enabling flexibility for our people and making it easy for us all to connect and collaborate.
Discover more about our locations.
Our commitment to you
Making an impact is more than just what we do: it’s why we’re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
We want you. The true you. Your own strengths, perspective and personality. So we’re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we’ll take your wellbeing seriously, too. Because it’s only when you’re comfortable and at your best that you can make the kind of impact you, and we, live for.
Your expertise is our capability, so we’ll make sure it never stops growing. Whether it’s from the complex work you do, or the people you collaborate with, you’ll learn every day. Through world-class development, you’ll gain invaluable technical and personal skills. Whatever your level, you’ll learn how to lead.
Connect to your next step
A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you’ll experience a purpose you can believe in and an impact you can see. You’ll be free to bring your true self to work every day. And you’ll never stop growing, whatever your level.
Discover more reasons to connect with us, our people and purpose-driven culture at deloitte.co.uk/careers
WPFULL SLICSS LOCOFFICE