HSM Engineer

Mphasis; Omaha (NE); On-site; USD 100,000 - 130,000; Full time

Job summary

A technology services company is seeking an experienced HSM Engineer to design, deploy, configure, and maintain Hardware Security Modules. This role ensures the security and compliance of cryptographic infrastructure while working with various HSM vendors. The ideal candidate will have a Bachelor's degree in Computer Science, 3–5 years of experience in HSM operations, and strong skills in scripting and security standards. This position may involve occasional travel and requires on-call support for 24/7 operations.

Qualifications

• 3–5 years of experience in HSM administration and cryptographic operations.
• Hands-on experience with HSM vendors.
• Familiarity with security standards like PCI-DSS.

Responsibilities

• Design, deploy, and maintain Hardware Security Modules.
• Monitor for unauthorized access or anomalies.
• Provide on-call support for HSM-related issues.

Skills

Experience with HSM administration

Knowledge of PKI and key management practices

Scripting languages (Python, PowerShell, Bash)

Strong problem-solving and analytical skills

Education

Bachelor’s degree in Computer Science or Information Security

Tools

HSM vendors (Thales, Entrust, Futurex, Utimaco, SafeNet)

Job description

Position Summary

HSM Engineer role will be responsible for designing, deploying, configuring, and maintaining Hardware Security Modules used to protect sensitive cryptographic keys and perform secure cryptographic operations. This role ensures the security, availability, and compliance of cryptographic infrastructure in alignment with industry standards, security policies, and regulatory requirements.

Key Responsibilities

• HSM Administration & Operations
• Deploy, configure, and manage HSM devices (e.g., Thales, Entrust, Futurex, Utimaco)
• Maintain and update HSM inventory to ensure up-to-date tracking.
• Submit Firewall request to allow network traffic between HSM and client systems
• Manage HSM partitioning, remote HSM administration and auditing functions.
• Conduct firmware and software upgrades while maintaining operational continuity.
• Ensure HSM configurations meet compliance standards (PCI-DSS, PIN, HIPAA, GDPR, ISO 27001, etc.).
• Monitor for unauthorized access or anomalies in cryptographic operations.
• Participate in internal and external security audits.
• Work with development and infrastructure teams to integrate cryptographic services into business applications.
• Troubleshoot HSM integration issues with applications, APIs, and security services.
• Implement automated monitoring and alerting for HSM performance and health.
• Respond to cryptographic security incidents and investigate root causes.
• Provide on-call support for HSM-related issues and outages.

Required Qualifications

• Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).
• 3–5 years of experience in HSM administration and/or cryptographic operations
• Hands-on experience with HSM vendors such as Thales, Entrust, Futurex, Utimaco, or SafeNet.
• Strong understanding of PKI, digital certificates, TLS/SSL, and key management practices.
• Familiarity with security standards: FIPS 140-2/140-3, NIST SP 800 series, PCI-DSS.
• Experience with scripting languages (Python, PowerShell, Bash) for automation.

Preferred Qualifications

• Cloud HSM experience (AWS CloudHSM, Azure Key Vault Managed HSM, GCP Cloud HSM).
• Certification such as CISSP, CISM, CCSP, or vendor-specific HSM certification.
• Experience with hardware cryptography in payment systems, banking, or government environments.
• Knowledge of secure application development and API security.

Soft Skills

• Strong problem-solving and analytical skills.
• Ability to work under pressure in high-security environments.
• Excellent communication and documentation skills.
• Ability to collaborate with cross-functional teams.

Working Conditions

• May require occasional travel for HSM installation or maintenance.
• On-call rotation for 24/7 HSM support.
• Secure lab environment for key ceremonies and cryptographic operations.