Security Engineer-Architect

We are seeking an experienced Security Engineer/Architect (HSM/KMS) to design, implement, and maintain enterprise key management solutions that protect sensitive data. The ideal candidate will have strong experience with Thales HSM products , cryptographic key lifecycle management, and security best practices aligned with NIST and industry standards.

Key Responsibilities:

• Design, implement, and maintain secure key management solutions and cryptographic key lifecycle processes.
• Manage the generation, distribution, storage, rotation, and monitoring of cryptographic keys.
• Build and maintain highly resilient, redundant, and secure key management systems.
• Ensure compliance with internal security standards and regulatory frameworks, and participate in security audits and assessments.
• Respond to security incidents involving cryptographic keys and implement corrective actions.
• Collaborate with security, operations, clients, partners, and vendors to integrate key management practices into broader security initiatives.
• Maintain detailed technical documentation, architectural diagrams, configurations, and incident response records.
• Conduct knowledge-sharing sessions on key management and cryptographic security best practices.
• Support automation of key lifecycle management using scripting and orchestration tools.

Required Skills & Experience:

• Strong security background with hands-on experience in HSM and KMS , including mandatory experience with Thales HSM products .
• Experience with key management systems and technologies such as HSM, KMS, and PKI .
• Strong understanding of cryptographic algorithms, protocols, and key lifecycle management.
• Experience with security frameworks including NIST, ISO 27001, and PCI DSS .
• Familiarity with cloud key management services such as AWS KMS and Azure Key Vault .
• Experience with Utimaco, Thales, Entrust, Gemalto, Vormetric, or CipherTrust Manager .
• Proficiency in Linux and Windows environments.
• Strong scripting and automation experience using Python, Perl, or PowerShell .
• Programming experience with Java or Go .
• Experience with Ansible , Terraform , CI/CD pipelines, and DevOps practices.
• Familiarity with monitoring tools such as Splunk, Elastic, Prometheus/Grafana, and ELK .
• Experience with JIRA , Agile Scrum methodologies, and incident management tools such as Remedy or ServiceNow .
• Ability to produce technical documentation and architectural diagrams from business and technical requirements.
• Bachelor's degree in Computer Science, Information Security, or related experience.
• 5 10 years of experience in key management, cryptographic security, or a related field.
• Relevant certifications such as CISSP, CISM, or CEH are a plus.