HSM Engineer

Location: Phoenix AZ or Omaha NE (5 Days Onsite)

Duration : FULLTIME

Key Responsibilities

• HSM Administration & Operations
• Deploy configure and manage HSM devices (e.g. Thales Entrust Futurex Utimaco)
• Maintain and update HSM inventory to ensure up-to-date tracking.
• Submit Firewall request to allow network traffic between HSM and client systems
• Manage HSM partitioning remote HSM administration and auditing functions.
• Conduct firmware and software upgrades while maintaining operational continuity.
• Ensure HSM configurations meet compliance standards (PCI-DSS PIN HIPAA GDPR ISO 27001 etc.).
• Monitor for unauthorized access or anomalies in cryptographic operations.
• Participate in internal and external security audits.
• Work with development and infrastructure teams to integrate cryptographic services into business applications.
• Troubleshoot HSM integration issues with applications APIs and security services.
• Implement automated monitoring and alerting for HSM performance and health.
• Respond to cryptographic security incidents and investigate root causes.
• Provide on-call support for HSM-related issues and outages.

Required Qualifications

• Bachelors degree in computer science Information Security or related field (or equivalent experience).
• 3 5 years of experience in HSM administration and/or cryptographic operations
• Hands-on experience with HSM vendors such as Thales Entrust Futurex Utimaco or SafeNet.
• Strong understanding of PKI digital certificates TLS/SSL and key management practices.
• Familiarity with security standards: FIPS 140-2/140-3 NIST SP 800 series PCI-DSS.
• Experience with scripting languages (Python PowerShell Bash) for automation.

Preferred Qualifications

• Cloud HSM experience (AWS CloudHSM Azure Key Vault Managed HSM GCP Cloud HSM).
• Certification such as CISSP CISM CCSP or vendor-specific HSM certification.
• Experience with hardware cryptography in payment systems banking or government environments.
• Knowledge of secure application development and API security.

Soft Skills

Strong problem-solving and analytical skills.

Ability to work under pressure in high-security environments.

Excellent communication and documentation skills.

Ability to collaborate with cross-functional teams.

Working Conditions

May require occasional travel for HSM installation or maintenance.

On-call rotation for 24/7 HSM support.

Secure lab environment for key ceremonies and cryptographic operations.