Responsibilities
- Implement and maintain secure physical and logical infrastructure for digital asset custody, including datacenter setup, configuration of Linux jump hosts, HSMs, and specialized network devices.
- Contribute to designing, implementing, and maintaining security tools within CI/CD pipelines, enforcing secure coding practices, and performing threat modeling for digital asset custody systems.
- Support the secure integration, deployment, and hardening of Key Management Systems (KMS) and design resilient interaction mechanisms with various blockchain networks. Understanding regulatory requirements (e.g., MiCA, DORA)
- Implement robust security controls for hybrid cloud/on-premises custody deployments, focusing on IAM, network segmentation, and ensuring security-first principles in Infrastructure as Code (IaC) templates.
- Participate in the identification, remediation, and monitoring of security vulnerabilities, and contribute to incident response playbooks and security tooling for digital asset custody.
- Support and document Key Ceremonies for cryptographic assets, ensuring strict adherence to protocols, multi-person control, and robust audit trails. Contribute to the architecture and implementation of highly secure, geographically dispersed, and tested backup/recovery strategies for cryptographic keys.
Requirements
- Experiences in DevSecOps, DevOps, or Software Engineering with a strong security focus, plus Information Security, emphasizing Digital Asset Custody or high-value cryptographic systems, ideally within a financial/regulated environment.
- Hands-on experience with KMS, HSMs, MPC systems, cryptographic practices, and a solid understanding of Blockchain technologies.
- Practical experience with physical datacenter operations (rack-and-stack, cabling), CI/CD tools, methodologies, and automating security into pipelines.
- Strong understanding of network security principles (firewalls, IDS/IPS, micro-segmentation), information security frameworks (ISO 27001, NIST CSF), and basic financial regulations (MiCA, DORA) understanding.
Benefits
- Emotional and mental balance support including consultation in difficult life situations and mental health awareness trainings.
- Physical health support including health check-ups, vaccination drives, and advice on healthy living and nutrition.
- Social connection offerings such as PME family service, FitnessCenter Job, flexible working (e.g., parttime, hybrid working, job tandem), and a culture of diversity, equity and inclusion.
- Financial security including pension plans, banking services for employees, company bicycle, and Deutschlandticket.
- Flexible working arrangements: parttime, hybrid working, job tandem.
Work Arrangement
Hybrid
Was wir Ihnen bieten
- Emotional ausgeglichen: Beratung in schwierigen Lebenssituationen und Angebote zur Förderung mentaler Gesundheit.
- Körperlich fit: umfangreiche Check-up Untersuchungen, Impfangebote und Beratung zur gesunden Lebensführung.
- Sozial vernetzt: Unterstützung durch den pme Familienservice, das FitnessCenter Job, flexible Arbeitszeitmodelle (bspw. Teilzeit, Jobtandem, hybrides Arbeiten), sowie einer umfangreichen Kultur der Vielfalt, Chancengleichheit und Teilhabe.
- Finanziell abgesichert: Beitragspläne für Altersvorsorge, Bankdienstleistungen für Mitarbeiter*innen, Firmenfahrrad oder dem Deutschlandticket.
What we offer
- Emotionally and mentally balanced: consultation in difficult life situations as well as mental health awareness trainings.
- Physically thriving: health check-ups, vaccination drives, advice on healthy living and nutrition.
- Socially connected: PME family service, FitnessCenter Job, flexible working (e.g parttime, hybrid working, job tandem), and an extensive culture of diversity, equity and inclusion.
- Financially secure: pension plans, banking services, company bicycle or “Deutschlandticket”.
Additional Information
- This job is available in full and parttime.
- Language requirement: German and English (inferred from bilingual posting and company location).
- Contact for recruitment questions: Ayse Kartal-Isik at +49 69 910-42410.
