Key Management & HSM Security Engineer

We’re hiring an experienced Key Management & HSM Security Engineer to lead the design, deployment, and management of secure cryptographic infrastructure within the organization. The focus will be on Thales HSM (Luna) and CipherTrust platforms, enabling secure root key management and cryptographic operations for enterprise-scale workloads.

This role demands deep expertise in HSM integration, key lifecycle management, and cryptographic standards, along with the ability to work cross-functionally with application, infrastructure, and security teams.

5 years of experience

• Lead deployment, configuration, and administration of Thales Luna HSM and CipherTrust Manager
• Implement root key security controls to safeguard cryptographic assets
• Define and manage key lifecycle processes—creation, rotation, archival, decommissioning
• Automate key provisioning and audit workflows using Python, Shell, or PowerShell
• Ensure adherence to compliance frameworks: FIPS 140-2/3, PCI DSS, NIST, GDPR

Security Architecture & Compliance

• Establish secure architecture for on-prem HSMs and integrate them into broader enterprise security posture
• Perform threat assessments and lead incident response efforts related to key compromise or misuse
• Maintain detailed documentation of architecture, operational procedures, and compliance reports
• Align HSM implementation with enterprise identity, access management, and PKI systems

Integration & Support

• Integrate HSMs with enterprise systems: applications, databases, file storage, certificate authorities
• Provide technical support for HSM infrastructure—troubleshooting key issues, crypto failures, performance bottlenecks
• Deliver internal training sessions and enforce key management best practices across technical teams