HSM Security Engineer

Insight Global; Dallas (TX); On-site; USD 96,432 - 110,208; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan after 90 days

Paid sick leave

Job summary

Insight Global is seeking a mid-to-senior level Security Engineer to design and support enterprise security solutions focused on cryptography and key management. This role will be onsite in Dallas and requires expertise in HSMs, RESTful APIs, and security best practices.

The ideal candidate has 5-7 years of experience, addressing security standards such as PCI DSS and GDPR. The position offers competitive pay ranging from $70/hr to $80/hr along with comprehensive benefits after 90 days of employment.

Qualifications

• 5-7 years of experience with cryptography and key management.
• Hands-on experience with HSMs, especially Thales Luna.
• Understanding of regulatory standards like PCI DSS and GDPR.

Responsibilities

• Design and maintain cryptographic security solutions.
• Evaluate encryption and key management approaches.
• Collaborate with teams to implement secure solutions.

Skills

Experience with HSM functions

RESTful APIs integration

Implementing security best practices

Managing systems in Linux and Windows

Cryptographic frameworks knowledge

Tools

Thales Luna HSM

Splunk

Postman

Kubernetes

OpenShift

Job description

JOB DESCRIPTION - 5 days a week in Denver, Chicago, Addison, Washington, DC or Charlotte - long term contract (12-24 months)

We are seeking a mid-to-senior level Security Engineer to design, implement, and support enterprise security solutions focused on cryptography, key management, and HSM platforms. This role sits within the Global Information Security (GIS) team and works closely with application, infrastructure, and business teams to deliver secure, compliant crypto solutions across the organization.

Job Responsibilities

• Design, implement, and maintain cryptographic security solutions, including key management systems and hardware security modules (HSMs)
• Partner with internal stakeholders to understand application and system security requirements and translate them into practical crypto solutions
• Evaluate and recommend the technical and operational feasibility of encryption and key management approaches
• Maintain and enhance hosted crypto platforms supporting payments, key management, and general-purpose encryption, ensuring compliance with banking and industry security standards
• Build proofs of concept and prototypes, and support solutions through design, testing, and production rollout
• Collaborate with database, operations, technical support, and engineering teams throughout the implementation lifecycle
• Administer and manage cryptographic keys, including:
• Key lifecycle management (creation, rotation, expiration, revocation)
• Centralized key management with strict access controls
• Alignment with internal security policies and standards

This role requires candidates to sit onsite 5 days a week in Denver, Chicago, Addison, Washington, DC or Charlotte

Required Skills and Experience

• 5-7 years of experience working with HSM (Hardware Security Modules) functions, Key Management and Cryptography (specifically Thales Luna HSM)
• 5-7 years of experience integrating and working with RESTful APIs (Postman, Insomnia)
• Experience implementing security best practices per Oasis KMIP 2 standards (including NIST SP 800-57, PCI DSS, GDPR
• Experience managing and securing systems in Linux and Windows environments
• Experience with cryptographic interfaces and frameworks such as PKCS#11, JCE, .NET, MS CNG Experience implementing monitoring and logging solutions (Splunk)

Nice To Have Skills and Experience

• Hands on experience working in containerized, cloud native environments including Kubernetes and OpenShift
• Understand and implement enterprise cryptography standards per industry. Specialize in crypto products like Thales CipherTrust Manager, Hardware Security Modules and Payshield 10x.
• Database encryption with Microsoft SQL TDE, Oracle TDE with PKCS11 and KMIP compliant products.
• Work closely with stakeholders to define crypto requirement for KMS and HSM needs.

Compensation

$70/hr to $80/hr.

Exact compensation may vary based on several factors, including skills, experience, and education.

Employees in this role will enjoy a comprehensive benefits package starting on day one of employment, including options for medical, dental, and vision insurance. Eligibility to enroll in the 401(k) retirement plan begins after 90 days of employment. Additionally, employees in this role will have access to paid sick leave and other paid time off benefits as required under the applicable law of the worksite location.