Crypto SSH & Linux Engineer

Engineer SSH + Linux

In this role you are responsible for making sure that SSH discovery tooling is maintained, i.e. you assist with reporting of the tooling, upgrade of the tooling, issues are reported to the vendor. You will work closely in a small team of engineers to look at new requirements and feature requests.

You will also be responsible for certain backend tasks, which are Linux-based with PostgreSQL.

Key duties include:

Role focus (SSH Engineer): Own and improve secure SSH access across the estate, ensuring consistent configuration, key/certificate handling, access controls, and operational hygiene. The candidate should have also Linux skills, this to support the backend of the environment, i.e. Postgresql DB.

New tooling adoption (PrivX): Lead/execute onboarding of PrivX to enable SSH discovery & reporting and Just-In-Time (JIT) privileged access, including integration, rollout, and stakeholder coordination.

Security & governance: Help enforce privileged access standards (least privilege, auditability, break-glass where applicable), produce evidence for audits, and support policy-aligned control design.

Automation (Python): Build and maintain Python scripts/tools to automate discovery tasks, reporting, access workflows, and integration with APIs/logging/CMDB-type systems where relevant.

Operations & troubleshooting: Diagnose SSH connectivity/auth issues, support incident/problem management, and drive continuous improvement via metrics and documentation.

Collaboration & communication: Work with platform, cloud, network, and security teams; translate technical requirements into recruiter-friendly skills and clear runbooks.

Key Skills Required

• To be successful in this role, you should meet the following requirements:

• Good understanding of Unix systems– User access setup, SSH config, bash scripting

• Good technical knowledge of SSH Keys, algorithms, configs, SSH certificates.

• Deep Linux understanding, i.e. service management and backend support.

• Experience of using Automation tools such as Terraform, Ansible, Python, Splunk, Postman.

• Understanding of software release management & deployment tools – GitHub, Jenkins etc

• Knowledge & Experience of Industry Best Practices and tools used for SSH Key discovery and remediation

• Experience and understanding of Databases – Microsoft SQL

• Identity Access Management Experience – RBAC, Privileged Access Management

• Experience working with Service Management tools and processes – ServiceNow, RFC's etc

• Good Experience of Microsoft Office – Advanced Excel skills

• Good understanding of IT Infrastructure technical platforms/technologies – VMware, Win and Linux infra, Databases, Firewalls, networks, etc

• Ability to work on occasional own initiative and under pressure

• A track record of constantly looking for ways to do things better and an excellent understanding of the mechanisms necessary to successfully implement change

Optional: Experience gained working in large organisations, preferably in the Financial Sector.

Optional: Venafi TPP knowledge & Experience – Venafi for SSH key discovery

Location

London, UK

Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at https://www.allegisgroup.com/en-gb/privacy-notices.

To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to https://www.allegisgroup.com/en-gb/privacy-notices.

We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at https://www.allegisgroup.com/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.