HSM Security Engineer

Ingenico; France; Sur place; EUR 60 000 - 80 000; Plein temps

Avantages offerts par ce poste

Diversity and inclusion initiatives

Accommodations for candidates with disabilities

Résumé du poste

Ingenico is recruiting an HSM Expert to strengthen their cryptographic security capabilities, focusing on key management and integration. The role involves working across multiple Group platforms in a hybrid position based in Paris (La Défense) or Valence.

The ideal candidate will have a strong background in HSM solutions and applied cryptography, along with advanced Linux administration skills. This position offers a highly critical technical environment with the opportunity to collaborate with industry experts.

Qualifications

• Proven experience with HSM solutions.
• Strong knowledge of applied cryptography (PKI, RSA, ECC, AES).
• Advanced Linux administration is required.

Responsabilités

• Install, configure, and administer HSM solutions.
• Manage the lifecycle of cryptographic keys.
• Develop automation scripts using Bash and Python.

Connaissances

HSM solutions

Applied cryptography

Advanced Linux administration

Technical English

TLS, PKCS#11

Bash

Python

Networking fundamentals

Formation

Bachelor's or Master's degree in IT / Cybersecurity

Outils

Automation scripts

Description du poste

Mission

As part of strengthening our cryptographic security capabilities (electronic signature, key management and injection), we are recruiting an HSM Expert.

You will act as a transverse technical lead across multiple Group platforms, working on critical environments in close collaboration with infrastructure, security, and project teams.

Your Responsibilities

HSM Management & Expertise

• Install, configure, and administer HSM solutions (Utimaco, Thales...)
• Manage the full lifecycle: deployment, maintenance, upgrades
• Secure environments (access control, roles, partitions)
• Support and train operational teams
• Contribute to monitoring (SNMP, syslog, SIEM integration)

Key Management & Cryptography

• Manage the full lifecycle of cryptographic keys (generation, rotation, revocation)
• Participate in key ceremonies
• Integrate HSMs into platforms (signature, key injection)
• Manage certificates and digital identities (X.509, PKCS#12...)

Automation & Integration

• Develop automation scripts (Bash, Python)
• Implement backup, restore, and security processes
• Integrate HSM into CI/CD environments

Security & Compliance

• Contribute to internal cryptographic policies
• Support security and compliance audits (PCI-DSS, PCI P2PE, PCI KMO...)
• Perform technology and security monitoring

Documentation & Collaboration

• Produce and maintain technical documentation
• Provide expert support to R&D, Ops, and Security teams
• Interact with vendors and technology partners

Profile

Must-have

• Proven experience with HSM solutions
• Strong knowledge of applied cryptography (PKI, RSA, ECC, AES...)
• Advanced Linux administration
• Fluent technical English

Key skills

• Protocols & standards: TLS, PKCS#11, DUKPT, TR-31 / TR-34
• Scripting (Bash / Python)
• Networking and security fundamentals

Nice to have

• Experience in payment or banking environments
• CI/CD or security integration experience
• Programming languages: Java, Kotlin, Go
• Knowledge of post-quantum cryptography

Soft Skills

• Strong attention to detail and security mindset
• Autonomous and accountable
• Analytical and problem‑solving skills
• Collaborative and transversal mindset
• Ability to simplify and explain complex topics

Education & Experience

• Bachelor's or Master's degree in IT / Cybersecurity or equivalent
• Significant experience in HSM environments (minimum 3 years)

Why join us?

• Highly critical and secure technical environment
• Transverse role with strong impact
• Work on core payment security systems
• Collaborate with recognized experts

Hybrid position, open to Paris (La Défense) or Valence (France).

As part of our values, we embrace diversity and inclusion at Ingenico. We are an equal opportunity employer and do not discriminate on the basis of an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status or any other protected characteristic under applicable law, whether actual or perceived.

Ingenico welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

We want to adapt our processes and create a safe work environment that welcomes everyone.