HSM Engineer: Secure Cryptographic Infrastructure

KTek Resourcing LLC; Omaha (NE); On-site; USD 120,000 - 180,000; Full time

Job summary

KTek Resourcing LLC in Omaha, Nebraska, is seeking an HSM Engineer to design, deploy, and maintain hardware security modules and the cryptographic infrastructure that protects sensitive keys and operations. You will work with Thales, Entrust, Futurex, Utimaco and other vendors, ensuring PCI-DSS, HIPAA, GDPR, ISO 27001 compliance, and secure integration with business apps, APIs, and services.

This role requires 3–5 years in HSM administration, scripting experience (Python/PowerShell/Bash), and

Qualifications

• Bachelor’s degree in CS, information security, or equivalent experience.
• 3–5 years in HSM administration or cryptographic operations.
• Hands-on with HSM vendors such as Thales, Entrust, Futurex, Utimaco, or SafeNet.
• Strong PKI, TLS/SSL, and key management knowledge.
• Experience with scripting for automation (Python, PowerShell, Bash).

Responsibilities

• HSM Administration & Operations.
• Deploy, configure, and manage HSM devices (Thales, Entrust, Futurex, Utimaco).
• Maintain and update HSM inventory for accurate tracking.
• Submit firewall requests for traffic between HSM and client systems.
• Manage HSM partitioning, remote admin, and auditing functions.
• Perform firmware and software upgrades while maintaining uptime.
• Ensure configurations meet PCI-DSS, PIN, HIPAA, GDPR, ISO 27001 standards.
• Monitor for unauthorized access or anomalies in cryptographic operations.
• Participate in security audits (internal & external).
• Collaborate with development and infra teams to integrate cryptographic services.
• Troubleshoot integration issues with apps, APIs, and security services.
• Implement automated monitoring and alerting for HSM performance.
• Respond to cryptographic incidents and investigate root causes.
• Provide on-call support for HSM issues and outages.

Skills

HSM administration

Cryptographic operations

PKI & TLS

Scripting: Python

Scripting: PowerShell

Scripting: Bash

Education

Bachelor’s degree in CS/InfoSec

Tools

Thales

Entrust

Futurex

Utimaco

SafeNet

Job description

KTek Resourcing LLC in Omaha, Nebraska, is seeking an HSM Engineer to design, deploy, and maintain hardware security modules and the cryptographic infrastructure that protects sensitive keys and operations. You will work with Thales, Entrust, Futurex, Utimaco and other vendors, ensuring PCI-DSS, HIPAA, GDPR, ISO 27001 compliance, and secure integration with business apps, APIs, and services.

This role requires 3–5 years in HSM administration, scripting experience (Python/PowerShell/Bash), and