Senior Lead Security Infrastructure Engineer, HSM Management

What you'll do

• Lead architecture, design, and documentation of complex Hardware Security Module (HSM) and cryptographic infrastructure.
• Design and implement HSM solutions across Thales and FutureX platforms, including deployment, configuration, and lifecycle management.
• Develop detailed architectural diagrams and operational runbooks to support knowledge continuity and operational excellence.
• Oversee migration, upgrade, and consolidation of HSM infrastructure with minimal disruption and maximum security.
• Provide expert guidance on cryptographic key management, secure storage, and compliance with industry standards like PCI-DSS and FIPS.
• Troubleshoot and resolve HSM-related issues using monitoring tools, performing root cause analysis and implementing corrective actions.

What we're looking for

• 5+ years of hands-on experience with Hardware Security Modules (HSM) and cryptographic infrastructure.
• Deep expertise in designing, implementing, and managing secure, scalable, and resilient HSM solutions across platforms like Thales and FutureX.
• Strong understanding of cryptographic principles, key management, confidential computing, and compliance with industry standards such as PCI-DSS and FIPS.
• Proficiency in using OpenSSL, certificate-based authentication mechanisms, and public cloud key management services.
• Experience in infrastructure automation tools (e.g., Terraform) for managing and scaling secure environments.
• Ability to collaborate across cross-functional teams to define security controls and infrastructure standards aligned with firm-wide policies.