Job Summary :

Seeking a skilled Key Management & HSM Security Engineer to design, implement, and manage Thales HSM (Luna) and CipherTrust key management solutions. The role involves securing cryptographic operations, ensuring compliance, and integrating HSMs with enterprise security systems.

Key Responsibilities :

Key Management & HSM Implementation :

- Deploy and manage Thales HSM (Luna) and CipherTrust solutions.

- Implement root key security, key lifecycle policies, and automation.

- Ensure compliance with FIPS 140-2/3, PCI DSS, GDPR, NIST.

Security Architecture & Compliance :

- Define security controls and risk assessment measures.

- Integrate HSMs with applications, databases, and identity systems.

- Manage incident response for cryptographic key compromises.

Integration & Support :

- Collaborate on HSM-based encryption for databases, storage, and cloud workloads.

- Troubleshoot HSM, CA, and cryptographic issues.

- Provide technical support, documentation, and training.

Required Skills & Experience :

- 5+ years in key management, HSM security, and cryptographic services.

- Expertise in Thales HSM (Luna) and CipherTrust platforms.

- Strong knowledge of PKI, encryption standards (AES, RSA, ECC, SHA-256).

- Experience with enterprise security standards (ISO 27001, PCI DSS, NIST 800-57).

- Scripting proficiency (Python, Shell, PowerShell).

- Cloud security knowledge (AWS KMS, Azure Key Vault, GCP KMS is a plus).

Preferred Qualifications :

- Certifications : CISSP, CISM, CCSP, Thales HSM Certifications.

- Experience in HSM integration, DevSecOps, and API security.