Security Engineer – Endpoint & Encryption (all genders)

You implement encryption solutions for end devices, files and removable media. The tasks range from standard enterprise environments to projects with special protection requirements. Key and recovery processes matter just as much as installation and reliable user support.

Full-disk encryption protects powered-off end devices; file encryption adds protection for shared storage. You distinguish these objectives and integrate DiskEncrypt and LAN Crypt into customer operations. Rollouts require pilot groups, application tests and controlled recovery procedures. External encrypted media is tested for provisioning and unlocking. Standard enterprise versions and approved variants are distinguished; sensitive projects follow specific deployment approvals.

• Plan and install Utimaco DiskEncrypt and LAN Crypt solutions according to customer needs and integrate them into existing identity and management processes.
• Implement policies for disk and file encryption, permissions and controlled key use.
• Conduct pilots, rollouts and recovery scenarios and assess their impact on applications and user flows.
• Integrate encrypted removable media, analyse technical errors and transparently escalate support cases to vendors.
• Conduct pilots with tests for user changes, policy changes and recovery.
• Set up key and recovery procedures with separation of roles and documented controls.

What matters is demonstrable experience that is relevant to the role. It may come from appropriate vocational training, a degree, professional practice or a well-founded career change. We will align the specific level of responsibility with your knowledge and experience.

• Experience with Windows end devices, administration and deploying security software.
• Understanding of encryption, permissions and controlled recovery processes.
• Ability to document changes and explain technical processes clearly to users.

This knowledge is helpful, but you do not need to have all of it at once. In your application, describe where you have already gained practical experience and which areas you would like to explore in greater depth.

• Experience with DiskEncrypt, LAN Crypt or hardware-encrypted media.
• Knowledge of endpoint management or projects with elevated protection requirements.

You ensure effective encryption without neglecting recoverability and operations. In classified deployment environments, the specifically approved product versions and project-specific approvals apply; a general product name is not sufficient.

This role can be based in Cologne or performed remotely. We will agree the specific form of collaboration, project requirements and any necessary customer appointments before you start.

This role is offered as permanent employment on a full-time or part-time basis. We will agree the responsibilities, working hours, start date and compensation to suit the role and your level of experience.

Show us in your application which experience or interests you bring to this role. A CV and relevant project examples, certificates or work samples will help us assess your professional background. Please do not send confidential customer data, credentials or protected source code.

Tell us your preferred working model, your possible start date and whether you would like to work full-time or part-time.

If you have questions about the role, contact our recruitment team at hr@otoko.com. Inclusion in the applicant pool is voluntary and takes place only with separate consent; it is not a prerequisite for reviewing your application.