Senior Hardware Security Module Engineer - General purpose and Payments

Senior Information Security Engineer/ Hardware Security Module Engineer (HSM / Payments Cryptography)

Location: Atlanta, GA (On-site)

Years of Experience: 5+ Years

About the Role

Senior Information Security Engineer will lead the design, implementation, operation, and governance of enterprise Hardware Security Module (HSM) platforms, with a primary focus on Thales Luna HSMs and Thales pay Shield 10. This role is critical to ensuring the security, availability, and compliance of cryptographic services supporting payment processing, identity, encryption key lifecycle management, and regulatory requirements.

Key Responsibilities

• Own end-to-end lifecycle management of Thales Luna Network HSM and pay Shield 10 platforms (provisioning, configuration, patching, upgrades, and decommissioning).
• Ensure high availability, resilience, and secure operations for mission-critical payment and cryptographic workloads.
• Define and enforce key-management policy (generation, storage, rotation, backup, recovery, and destruction) with dual control.
• Lead break-glass and physical safe access procedures, including secure custody of HSM artifacts.
• Manage pay Shield 10 integrations for PIN processing, EMV, tokenization, and transaction cryptography.
• Support integrations with payment processors, core banking platforms, and internal applications.
• Drive compliance with PCI DSS, PCI PIN, and related security requirements for payment cryptography.
• Lead audits, risk assessments, and evidence collection for cryptographic controls and HSM usage.
• Develop and maintain SOPs, runbooks, and architecture documentation for HSM services and cryptographic controls.
• Provide technical leadership and mentoring to engineers and operations partners; collaborate across Infrastructure, Cloud, AppDev, IAM, Payments, and Compliance.
• Manage vendor relationships with Thales (support engagements, roadmap alignment, and renewals).

Required Qualifications

• Bachelor's degree in computer science, Information Security, Engineering, or related field (or equivalent experience).
• 8+ years in information security, cryptography, or infrastructure security.
• 5+ years managing Thales Luna HSM platforms.
• 3+ years with Thales pay Shield in payment processing environments (pay Shield 10 preferred).
• Strong foundation in cryptography, key lifecycle management, and dual-control processes; working knowledge of PCI DSS / PCI PIN.
• Experience operating HSMs in highly regulated, 24/7 production environments.

Preferred Qualifications

• Experience with cloud-connected or hybrid HSM deployments (on-prem + cloud).
• Familiarity with Thales HSMs, key vaults, or enterprise KMS solutions.
• Experience with EMV, PIN translation, tokenization, or payment switch integrations.
• Industry certifications preferred:
• CISSP, CISM, or CISA
• PCI Professional (PCIP)
• Thales HSM or pay Shield certifications

Offers of employment are conditional upon passage of screening criteria applicable to the job

EEO Statement

Integrated into our shared values is NCR Voyix's commitment to equal employment opportunity. All qualified applicants will receive consideration for employment without regard to sex, age, race, color, creed, religion, national origin, disability, sexual orientation, gender identity, veteran status, military service, genetic information, or any other characteristic or conduct protected by law. NCR Voyix is committed to being a globally inclusive company where all people are treated fairly, recognized for their individuality, promoted based on performance and encouraged to strive to reach their full potential. We believe in understanding and respecting differences among all people. Every individual at NCR Voyix has an ongoing responsibility to respect and support a globally diverse environment.

Statement to Third Party Agencies To ALL recruitment agencies: NCR Voyix only accepts resumes from agencies on the preferred supplier list. Please do not forward resumes to our applicant tracking system, NCR Voyix employees, or any NCR Voyix facility. NCR Voyix is not responsible for any fees or charges associated with unsolicited resumes

"When applying for a job, please make sure to only open emails that you will receive during your application process that come from a @ncrvoyix.com email domain."