Security Infrastructure Engineer, HSM Management

What you'll do

• Design and document complex Hardware Security Module and cryptographic infrastructure to meet business and security requirements.
• Implement and manage the full lifecycle of Hardware Security Module solutions across Thales and FutureX platforms.
• Develop architectural diagrams, system documentation, and operational runbooks to ensure knowledge continuity.
• Oversee the migration, upgrade, and consolidation of Hardware Security Module infrastructure with minimal disruption.
• Provide technical guidance on cryptographic key management, secure storage, and compliance with PCI DSS and FIPS standards.
• Troubleshoot infrastructure issues and perform root cause analysis using monitoring tools to implement corrective actions.
• Participate in risk assessments, audits, and incident response activities for cryptographic environments.
• Use enterprise-authorized AI to accelerate threat modeling, vulnerability analysis, and security documentation.

What we're looking for

• Formal training or certification on security engineering concepts and 3+ years of applied experience.
• Hands-on engineering experience with Hardware Security Modules, including architecture, system design, disaster recovery, and business continuity.
• Experience with network security, firewalls, secure room operations, and key ceremonies.
• Proficient technical troubleshooting skills with strong Linux and Unix administration experience in enterprise environments.
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies.
• Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments.
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• Experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting (preferred).