Senior Technical Application Specialist - Key Management

JOB TITLE: Senior Technical Application Specialist (Key Management)

SALARY: £72,702 - £80,780

LOCATION(S): Bristol, Edinburgh, or Leeds

HOURS: Full-time - 35 hours per week

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at our Bristol, Edinburgh, or Leeds office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.

About this opportunity

We're looking for a Senior Technical Application Specialist to take ownership of key management and cryptography services, with a focus on platform engineering and DevOps practices.

The role is centred on the need for building and operating secure, scalable and automated services that are easy for engineering teams to consume.

The Cryptography Lab is part of the Chief Security Office (CSO) and is responsible for defining and delivering the Group's cryptography services, including key management, HSM‑backed platforms, secrets management, certificate and trust services, and cryptographic software integrations.

Participate within the Key Management feature team, working in close coordination with product, engineering, platform, and application teams to embed cryptography seamlessly into modern delivery pipelines and architectures.

What you'll be doing

• Act as a Key Management Officer (KMO) operating under dual-control and split-knowledge procedures.

• Perform and oversee HSM lifecycle operations, including key generation, rotation and decommissioning. Participate in and support key ceremonies and regulated cryptographic operations.

• Maintain and validate cryptographic key inventories, including audit and assurance readiness.

• Support governance of physical key safes and coffers, including access reviews and incident escalation.

• Design, build and operate secure key management platforms backed by HSMs.

• Engineer CI/CD pipelines and infrastructure-as-code to automate cryptographic services.

• Develop self-service integration patterns that embed cryptography into delivery pipelines.

• Improve resilience, observability and release confidence for crypto platforms.

• Work with application teams to reduce friction while preserving security controls.

Focus on Internal Consumers:

• Create solutions and services that are secure by default and easy to use / consume.

• Simplify adoption of cryptography through APIs, tooling and automation.

• Identify and remove pain points for the feature team and in how teams integrate with the key management services

Why join us?

We're transforming at pace. Investing billions in our people, data and tech to change the way we meet the needs of our 28 million customers. We're growing, and we'd love you to be part of the journey.

What we're looking for?

We're looking for experience across key management, cryptography operations and platform engineering, particularly:

• Acting in, or working closely with, Key Management Officer (KMO) roles operating under defined security procedures.

• Experience supporting key management and cryptography services, including HSM-backed platforms.

• Comfortable operating in regulated environments, following audit and assurance requirements.

• DevOps and platform engineering for security-critical services.

• Operating and supporting large-scale, business-critical platforms.

You'll also:

• Be comfortable working with complex platform and influencing technical decisions.

• Have experience improving engineering practices in existing teams.

• Be able to balance automation with security and control, improving reliability without weakening assurance.

Personal Skills:

• Clear communicator who can explain complex topics simply.

• Collaborative problem-solver who enjoys improving systems and ways of working.

• Comfortable challenging existing approaches and driving incremental change.

And any experience of these would be great

• Hands-on experience participating in key ceremonies, dual control or split-knowledge models.

• Exposure to governance of physical key safes, coffers, or secure key storage.

• Experience modernising or automating security or cryptography operations.

We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.

This is a place for you

Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities, and we're committed to creating an environment in which everyone can thrive, learn and develop.

We also offer a wide-ranging benefits package, which includes:

• A generous pension contribution of up to 15%

• An annual performance-related bonus

• Share schemes including free shares

• Benefits you can adapt to your lifestyle, such as discounted shopping

• 30 days' holiday, with bank holidays on top

• A range of wellbeing initiatives and generous parental leave policies

Ready for a career where you'll learn and thrive? Apply today and find out more.

Proud member of the Disability Confident employer scheme

Disability Confident

About Disability Confident

A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to Disability Confident .