The Team:

In the Software Security Platform group, our mission is to continuously improve Bloomberg’s security posture by building foundational services and libraries that enable zero-trust application architectures! Our work involves addressing security issues and problems in highly available, low latency distributed systems.

The systems we build are used to secure every interaction our clients have with Bloomberg’s applications and APIs! Our clients trust us with large volumes of critical data every day, and our libraries and services are used to encrypt and protect it. We therefore pay phenomenal attention not only to security, but also to scalability and performance.

The Cryptographic Hardware Services team is entrusted with maintaining Bloomberg’s most critical cryptographic key material. Protecting the ‘keys to the kingdom’ requires we employ both innovative equipment and industry standard methodology procedures. We’re investing in this team to create a scalable solution for providing hardware-based cryptographic services to many more of the software solutions across Bloomberg. This solution will require a multi-disciplinary team for engineering components as well as automating and performing well-drilled operations.

The Role:

As an operational specialist you’ll be responsible for designing, implementing and automating procedures for handling Bloomberg’s most sensitive key material. This will include the full lifecycle of provisioning new Hardware Security Modules to decommissioning, managing access to key material, performing backups, validating their physical security and handling cold-boot scenarios. Through all these procedures you’ll be ensuring compliance with regulatory requirements and industry best practices, as well as driving Bloomberg to new levels of operational excellence. You’ll be defining and setting up the necessary telemetry, monitoring, capacity planning and auditing as we scale out the platform.

You'll need to have:

• Experience managing, installing and administering Hardware Security Modules (HSMs) and associated software services.
• Use of automation tools such as Salt, Chef, Ansible and similar, ideally in highly-secure environments.
• Experience with Microsoft Certificate Services, EJBCA, ACME or other solutions for managing X.509 PKI.
• Experience authoring Certificate Policies and Certification Practice Statements (CP/CPS).
• Familiarity with common standards such as PCI DSS.
• Deep understanding of X.509 and certificate management processes involved in maintaining a Public Key Infrastructure.
• Solid understanding of cryptography.
• Good understanding of secure coding techniques and IT security principles.

We'd love to see:

• Development experience in scripting languages such as Python
• Familiarity with SRE model and principles.

Bloomberg is an equal opportunity employer, and we value diversity at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg is a disability inclusive employer. Please let us know if you require any reasonable adjustments to be made for the recruitment process. If you would prefer to discuss this confidentially, please email amer_recruit@bloomberg.net

Salary Range: 90,000 - 160,000 USD Annually + Benefits + Bonus