Infrastructure Engineer (HSM Specialist)

ZipRecruiter; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading recruitment platform in London is seeking a skilled Cryptography Infrastructure Engineer to enhance their cryptographic infrastructure. The ideal candidate will have hands-on experience with Hardware Security Modules, ensuring compliance across various security frameworks. Key responsibilities include acting as a subject matter expert, supporting monitoring solutions, and collaborating with infrastructure teams. This is a critical role for securing global encryption processes.

Qualifications

• Hands-on experience with HSM technologies like Thales Luna, Thales Payshield, or Entrust nShield.
• Strong understanding of security frameworks and regulations like PCI DSS and ISO2700x.

Responsibilities

• Act as SME for HSM technologies.
• Implement and support monitoring solutions.
• Collaborate to enhance resilience and compliance.

Skills

Experience with Hardware Security Modules (HSMs)

Implementation of monitoring solutions

Collaboration with technical teams

Cryptographic key management

Tools

Splunk

SNMP

Job description

Job Description

About the Role

We are looking for a Cryptography Infrastructure Engineer with hands-on experience working with Hardware Security Modules (HSMs) such as Thales Luna, Thales Payshield, or Entrust nShield. This role is critical in strengthening our cryptographic infrastructure, ensuring security, compliance, and resilience across the organization's global encryption estate.

You will be part of a specialist team responsible for monitoring, managing, and enhancing HSM observability, while collaborating with stakeholders and technical teams to design and implement secure cryptographic solutions.

Key Responsibilities

1. Act as Subject Matter Expert (SME) for one or more HSMs (Thales Luna / Thales Payshield / Entrust nShield).
2. Implement and support monitoring & alerting solutions (e.g., Splunk, SNMP).
3. Collaborate with infrastructure and security teams to improve resilience, monitoring, and alerting.
4. Document solutions, write design/test specifications, and contribute to process improvements.
5. Support cryptographic key management and encryption processes.
6. Ensure solutions comply with security frameworks and regulations (PCI DSS, ISO2700x, GDPR, NIST, etc.).