HSM Architect (m/w/d) – Winterthur Area

NTT DATA, Inc.; Winterthur; Vor Ort; CHF 150.000 - 230.000; Vollzeit

Zusammenfassung

NTT DATA, Inc. in Winterthur, Switzerland seeks an experienced HSM Architect to provide technical leadership and architecture governance for hardware security modules and cryptographic infrastructures.

The role translates cryptographic and regulatory requirements into auditable, secure, and scalable solutions. You will design, implement, and govern enterprise HSM architectures, lead security incident responses, and collaborate with cross-functional teams to ensure end-to-end cryptographic

Qualifikationen

• Extensive experience designing and supporting enterprise HSM and cryptographic environments.
• Strong expertise in Thales Luna Network HSMs, key management, PKI, certificate services, and cryptographic operations.
• Deep understanding of cryptographic governance, security controls, compliance requirements, and auditing principles.
• Experience implementing highly secure, resilient, and operationally sustainable security architectures.
• Ability to translate business, security, and regulatory requirements into practical technical solutions.
• Strong analytical, communication, and stakeholder management skills.

Aufgaben

• Design, implement, and govern enterprise HSM and cryptographic infrastructure architectures.
• Provide expertise in key management, PKI integration, cryptographic controls, and secure operational processes.
• Architect and maintain HSM lifecycle processes, including provisioning, rotation, backup, recovery, and retirement.
• Ensure compliance with regulatory and industry standards such as PCI-DSS, eIDAS, and security governance frameworks.
• Support and lead complex security incidents, cryptographic investigations, and major change activities.
• Define secure backup, restore, disaster recovery, and business continuity strategies for HSM platforms.
• Develop and maintain architecture standards, operational procedures, and governance documentation.
• Collaborate with security, infrastructure, cloud, application, and compliance teams to ensure end-to-end cryptographic security and operational alignment.
• Act as the senior escalation point for HSM and cryptographic infrastructure challenges.

Kenntnisse

HSM architecture

Key management

PKI integration

Cryptographic operations

Security governance

Tools

Thales Luna HSMs

Jobbeschreibung

We are seeking an experienced HSM Architect to provide technical leadership and architecture governance for Hardware Security Module (HSM) and cryptographic infrastructure services. The role is responsible for designing, securing, and governing enterprise cryptographic environments, ensuring compliance, resilience, and operational excellence. As a senior technical authority, you will translate cryptographic and regulatory requirements into secure, auditable, and supportable operational solutions.

Key Responsibilities:

• Design, implement, and govern enterprise HSM and cryptographic infrastructure architectures.
• Provide expertise in key management, PKI integration, cryptographic controls, and secure operational processes.
• Architect and maintain HSM lifecycle processes, including provisioning, rotation, backup, recovery, and retirement.
• Ensure compliance with regulatory and industry standards such as PCI-DSS, eIDAS, and security governance frameworks.
• Support and lead complex security incidents, cryptographic investigations, and major change activities.
• Define secure backup, restore, disaster recovery, and business continuity strategies for HSM platforms.
• Develop and maintain architecture standards, operational procedures, and governance documentation.
• Collaborate with security, infrastructure, cloud, application, and compliance teams to ensure end-to-end cryptographic security and operational alignment.
• Act as the senior escalation point for HSM and cryptographic infrastructure challenges.

Required Qualifications:

• Extensive experience designing and supporting enterprise HSM and cryptographic environments.
• Strong expertise in Thales Luna Network HSMs, key management, PKI, certificate services, and cryptographic operations.
• Deep understanding of cryptographic governance, security controls, compliance requirements, and auditing principles.
• Experience implementing highly secure, resilient, and operationally sustainable security architectures.
• Ability to translate business, security, and regulatory requirements into practical technical solutions.
• Strong analytical, communication, and stakeholder management skills.

Preferred Certifications:

• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• Additional Security, Network, Storage, or Compute infrastructure certifications are advantageous

Language Requirement:

• German language proficiency at minimum B2 level is mandatory.
• The role requires the ability to participate in technical discussions, incident coordination, service reviews, change management activities, and day-to-day communication with German-speaking stakeholders, customer teams, operational contacts, and site personnel.
• Applicants must hold Swiss citizenship.

Location:

• Candidates should be based in, or regularly available within the Winterthur region to support local operational alignment, customer interaction, coordination with onsite and remote-hands teams, and participation in governance, escalation, architecture, and service review meetings as required.