HSM Architect

Greytip Software Private Limited; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Greytip Software Private Limited in Bengaluru seeks a mid-level HSM Architect with strong C/C++ and cryptographic expertise to design secure cryptographic services and key management. The role focuses on building scalable, high-availability HSM software and firmware.

You will implement and optimize interfaces like PKCS#11, KMIP, and REST, ensure FIPS 140-2/3 compliance, and work with cloud/enterprise architects to deliver secure, multi-tenant solutions.

Qualifications

• Bachelor's or master's in computer science, electronics, cryptography, or related field.
• Strong hands-on experience in C/C++ and cryptographic systems.
• Experience with hardware security modules, secure firmware, and secure software design.

Responsibilities

• Design and architect HSM software/firmware components including key management, cryptographic services, and secure storage.
• Develop and maintain high-performance, secure C/C++ code for cryptographic and HSM subsystems.
• Define and implement HSM interfaces such as PKCS#11, KMIP, REST, and proprietary APIs.
• Work on secure boot, firmware update, and trusted execution environments.
• Design solutions for multi-tenant, high-availability, and fault-tolerant HSM deployments.
• Perform threat modeling, security reviews, and cryptographic design validation.
• Optimize concurrency, multi-threading, and hardware acceleration (PCIe, FPGA, TPM, etc.).
• Collaborate with system, network, and cloud architects for HSM integration in enterprise and cloud environments.
• Ensure compliance with standards such as FIPS 140-2/3, Common Criteria, and ETSI where applicable.
• Provide technical leadership and mentor junior engineers.

Skills

C/C++

Multithreading

Cryptography

HSM

Linux kernel

Security standards

Education

Bachelor's/Master's in CS/EC/Crypto

Tools

PKCS#11

KMIP

REST API

Job description

Join us in our mission to protect the digital world with indigenous, future-proof, quantum-safe technologies.

We are looking for a Mid-Level Hardware Security Module (HSM) Architect with strong hands on experience in C/C++ and a solid understanding of cryptographic systems and HSM architecture. The ideal candidate will be responsible for designing, developing, and optimizing secure cryptographic services, key management systems, and HSM firmware/software components with a focus on performance, scalability, and high availability and read on…

Key Responsibilities

Design and architect HSM software/firmware components including key management, cryptographic services, and secure storage.

• Develop and maintain high-performance, secure C/C++ code for cryptographic and HSM subsystems.


• Define and implement HSM interfaces such as PKCS#11, KMIP, REST, and proprietary APIs.


• Work on secure boot, firmware update, and trusted execution environments.


• Design solutions for multi-tenant, high-availability, and fault-tolerant HSM deployments.


• Perform threat modeling, security reviews, and cryptographic design validation.


• Optimize concurrency, multi-threading, and hardware acceleration (PCIe, FPGA, TPM, etc.).


• Collaborate with system, network, and cloud architects for HSM integration in enterprise and cloud environments.


• Ensure compliance with standards such as FIPS 140-2/3, Common Criteria, and ETSI where applicable.


• Provide technical leadership and mentor junior engineers.

Required Skills

• Strong proficiency in C and C++ (multithreading, memory management, performance tuning).


• Deep understanding of HSM architecture:


• Secure key storage and isolation


• Partitioning, multi-tenancy, and access control


• HA, clustering, and disaster recovery


• Solid knowledge of cryptography:


• Random number generation and entropy sources


• Experience with cryptographic standards and APIs:


• Experience with Linux system programming and kernel/user-space interaction.


• Experience with commercial HSMs (Thales, Utimaco, Safenet, AWS CloudHSM, etc.).


• Knowledge of FIPS 140-2/3 certification process.


• Exposure to cloud-based KMS and HSM virtualization.


• Experience with FPGA or hardware acceleration.

Education Bachelor’s or master’s degree in computer science, Electronics, Cryptography, or related field.