Security Engineer

Position- Security Engineer

location is Plano, TX and Charlotte, NC... Hybrid - (3 days onsite in a week)

Must Haves / Required Skills:

Security Background (HMS, KMS examples are Thales- NEED THALES PRODUCT EXP.)

Python

Java

Job Description

We are seeking a highly skilled Senior Security Test Automation Engineer with deep expertise in the integration and inner workings of Hardware Security Modules (HSMs) and Key Management Systems (KMS) to design, build, test, and validate enterprise-grade cryptographic solutions using a custom test harness. This role focuses on end-to-end validation after automated patch deployment on critical cryptographic platforms.

Key Responsibilities

Engineering Architecture

Design, deploy, and manage HSM and KMS platforms across on-prem and cloud environments

Develop and integrate secure cryptographic services leveraging REST-based APIs

Interface with enterprise security architecture to ensure alignment with cryptographic standards and policies

Support automated patch validation and continuous platform currency lifecycle management across cryptographic infrastructure

Development Automation

Build and maintain CRUD-based REST APIs using Python and Java

Develop automation solutions using Ansible and shell scripting for provisioning, patching, and testing

Create reusable frameworks for platform validation and operational efficiency

Integrate automation into CI/CD pipelines for consistent validation and deployments

Testing Validation

Design and implement end-to-end automated test harnesses for validation of:

Patches and upgrades

Security controls and configurations

Functional and performance requirements

Develop detailed test cases and scenarios for cryptographic workflows and integrations

Execute regression, functional, and performance testing across environments

Documentation Troubleshooting

Produce comprehensive documentation including:

Test scenarios and validation results

Failure analysis and root cause findings

Step-by-step troubleshooting and recovery procedures

Maintain operational runbooks and knowledge base artifacts

Lead troubleshooting efforts for complex issues across HSM/KMS platforms

Collaboration Communication

Clearly articulate technical concepts to cross-functional teams

Work independently with minimal supervision while driving deliverables

Collaborate closely with engineering, operations, and security teams

Required Qualifications

8+ years of experience in security engineering, cryptography, or key management systems

Proficiency in programming: Python and Java

Experience with:

REST API development (CRUD operations)

Linux environments and shell scripting

Configuration management tools using Ansible

Hands-on experience in:

Automated testing frameworks and test harness design

Patch validation and end-to-end system testing

Exposure to DevOps and CI/CD practices

Experience in performance testing and security validation at scale

Strong problem-solving and analytical skills

Excellent verbal and written communication skills

Preferred Qualifications

Experience with HSM/KMS vendors such as Thales, Utimaco, FutureX, or Entrust

Familiarity with cloud KMS offerings (e.g., AWS KMS, Azure Key Vault)

Knowledge of security frameworks (NIST, ISO 27001, PCI DSS)

Cryptographic principles, PKI, and security protocols (e.g., TLS, SSH)

Key Competencies

Strong documentation and structured thinking

Attention to detail in testing, validation, and troubleshooting

Capability to communicate complex security concepts clearly