Technical Business Analyst - Cryptography - Poland

Contract: Technical Business Analyst - Cryptography
Location: Poland (Warsaw or Krakow preferred) - Remote considered
Start Date: ASAP (once background checks completed)
Duration: 12 months - extendable
Rate: €320-€360 a day
Reference: 20721

We are looking for an experienced Technical Business Analyst to support a major transformation programme focused on cryptography, key management and privileged access.
The programme is modernising enterprise credential management, moving from long-lived static SSH keys towards centrally managed and short-lived certificate-based authentication.
This is a highly technical BA role. You will work closely with engineering, security, cloud and infrastructure teams, translating cryptographic controls into clear requirements, supporting testing and helping drive migration across a large estate. 

Key Responsibilities

• Translate cryptographic policies and security controls into clear, testable technical requirements.
• Write specifications for engineering, automation, discovery and reporting solutions.
• Own UAT, including test planning, execution, defect management and sign-off.
• Validate key and certificate discovery and reporting outputs.
• Support SSH key rotation, host onboarding and credential migration.
• Work with application, infrastructure, cloud and security teams to resolve delivery blockers.
• Track Legacy key removal and migration progress through to completion.
• Provide progress, risk and dependency updates to project leadership.

Essential Experience

• Strong technical BA experience within infrastructure, cybersecurity or security transformation.
• Demonstrable knowledge of public-key cryptography and PKI.
• Strong understanding of SSH authentication, including user/host keys, authorized_keys, known_hosts and agent forwarding.
• Understanding of certificate authorities, trust chains and certificate life cycle management, including CRL and OCSP.
• Knowledge of short-lived/ephemeral certificates and certificate-based authentication.
• Experience with enterprise credential life cycle management, including discovery, ownership, rotation and decommissioning.
• Proven experience writing technical specifications and owning UAT.
• Comfortable working across engineering, security, cloud and application teams.

Desirable

• SSH key management or PAM platforms.
• Machine identity or certificate life cycle management.
• HSMs, cloud key management or secrets management.
• NIST, FIPS or PCI DSS cryptographic requirements.
• Crypto-agility or post-quantum readiness.
• CI/CD and source-control integration.
• Financial services or other regulated environments.
• CISSP or similar security certification.

Important: Strong practical cryptography and key-management knowledge is essential for this role.

If you are a technically strong BA who can bridge the gap between cryptographic/security requirements and engineering delivery, we would like to hear from you.

Networking People (UK) is acting as an Employment Business in relation to this vacancy.