HSM Security Engineer - Information Technology - Analysts

MassGenics, Inc.; Addison (TX); Hybrid; USD 110,000 - 117,000; Part time

Job summary

Innova Solutions is hiring an HSM Security Engineer for a 12- to 18-month contract in Addison, TX. The role focuses on cryptographic design, key management, and secure integrations with Thales Luna/CTM and HSM products.

The candidate will design, implement, and maintain crypto solutions, including policy enforcement, cloud/onsite deployments, and lifecycle management. Strong IaC, Linux/Windows administration, and API security skills are required.

Qualifications

• Design, implement, and support enterprise cryptographic services and key management platforms.
• Enforce cryptographic architectures per industry standards and frameworks.
• Hands-on admin of Linux/Windows environments with IaC and automation tooling.
• Collaborate with security, cloud, and application teams to define cryptographic control requirements.

Responsibilities

• Design and maintain crypto and key management systems.
• Develop prototypes and lead implementation cycles with technical teams.
• Administer and manage cryptographic keys and life cycles.
• Ensure access controls align with security policies.

Skills

HSM experience

Thales Luna/CTM

Key management products

Tools

PowerShell

Python

GitOps

Ansible

Terraform

Kubernetes

OpenShift

Podman

Docker

Helm

CI/CD

Job description

HSM Security Engineer - Information Technology

Job ID: 1021717 Addison , Texas Job Type: Contract Added - 09/04/26

Job Description

A client of Innova Solutions is immediately hiring for anHSM Security Engineer. Position type: Contract. Duration: 12 to 18 months. Location: 5 days onsite in Addison, TX. As anHSM Security Engineer, you will: Top Skills:

• 5+ years of experience in HSM.
• 3+ years of experience in Thales product such as Luna and/or Cipher Trust Manager (CTM).
• 3+ years of experience in key Management products - Thales payShield, SafeNet HSM, Azure Key Vault (AKV), AWS KMS.

Description

Mid-level Senior Security Engineer is responsible for security design, implementing and maintain vendor security applications primarily related to crypto/security functions and modules.

These requirements will then be used to make you determine and recommend the technical and operational feasibility of the solutions in the crypto space.

You will be required to maintain and enhance hosted crypto solutions like key management, payment, and general purpose HSMs which are integrated with end user applications so that they are compliant to the banks, as well as industry standards of key security.

You would work to develop prototypes of the system design and work with database, operations, technical support, and other various technocrats throughout the proof of concept and implementation cycle.

You will use your knowledge and abilities as senior technical resources to provide your expertise to the team(s).

You would also be responsible for administering and managing cryptographic keys, including key life cycle management, centrally managing keys with granular key management and proper access controls per our security standards and policy guidance.

Required Experience

• Design, implement, and support enterprise cryptographic services and key management platforms, including Thales CipherTrust Manager, Luna Network HSM, payShield 10K/10K+, Cloud HSM, and Cloud KMS solutions.
• Enforce cryptographic architectures aligned with industry standards and frameworks including OASIS KMIP 2.x, PCI DSS, PCI HSM, NIST SP 800-57, NIST SP 800-131A, FIPS 140-3, GDPR, EMVCo, GlobalPlatform, and ANSI standards.
• Establish and maintain enterprise-wide data protection controls, including data classification, encryption policies, key governance, secrets management, tokenization, and compliance monitoring.
• Hands-on experience administering and automating Linux and Windows environments using modern Infrastructure-as-Code and automation frameworks such as PowerShell, Python, and GitOps methodologies. Ansible and Terraform are nice to have.
• Strong understanding of cryptographic APIs and integration frameworks including REST APIs, PKCS#11, KMIP, JCE/JCA, Microsoft CNG, MSCAPI, OpenSSL, and cloud-native security SDKs.
• Design and operate cloud-native and containerized platforms using Kubernetes, OpenShift, Podman, Docker, Helm, and CI/CD pipelines.
• Experience implementing and testing APIs using modern development and integration tools such as Postman, Insomnia, Swagger/OpenAPI, and API Gateway platforms.
• Implement enterprise observability and operational monitoring using Splunk Enterprise, Dynatrace. Other tools like Prometheus, Grafana, Elastic Stack, and SNMPv3 monitoring solutions are nice to have.
• Utilise Agile, Scrum, Kanban, DevSecOps, Jira, Azure DevOps, and SDLC best practices to support secure and efficient platform delivery.
• Perform lifecycle management, configuration management, firmware upgrades, vulnerability remediation, patch management, and compliance validation for cryptographic infrastructure.
• Support enterprise adoption of Zero Trust security principles, machine identity management, certificate automation, and Post-Quantum Cryptography (PQC) readiness programs.
• Experience with encryption and key management solutions including:
  • Thales Luna Network HSM
  • Thales payShield 10K
  • CipherTrust Manager
• Experience implementing enterprise Key Lifecycle Management (KLM), cryptographic policy enforcement, and automated certificate management across on-premises and cloud environments.
• Ability to partner with application owners, architects, cloud teams, and security stakeholders to define and implement cryptographic controls, key management strategies, and HSM/KMS service requirements.
• Knowledge of database encryption technologies, including:
  • Microsoft SQL Server TDE and EKM
  • Oracle TDE
  • PostgreSQL encryption
  • KMIP and PKCS#11-based key management integrations
• Experience with enterprise secrets management and workload identity solutions for Kubernetes and cloud-native applications.
• Familiarity with Post-Quantum Cryptography (PQC), crypto-agility initiatives, and quantum-safe migration strategies.

This position is only open to applicants who can be engaged on a W-2 basis.

Pay Range and Benefits

Pay Range*: $80 - $85 per hour *Pay range offered to a successful candidate will be based on several factors, including the candidate's education, work experience, work location, specific job duties, certifications, etc.

Benefits: Innova Solutions offers benefits (based on eligibility) that include the following: Medical & pharmacy coverage, Dental/vision insurance, 401(k), Health saving account (HSA) and Flexible spending account (FSA), Life Insurance, Pet Insurance, Short term and Long term Disability, Accident & Critical illness coverage, Pre-paid legal & ID theft protection, Sick time, and other types of paid leaves (as required by law), Employee Assistance Program (EAP).

About Innova Solutions

Founded in 1998 and headquartered in Atlanta, Georgia, Innova Solutions employs approximately 50,000 professionals worldwide and reports an annual revenue approaching $3 Billion. Through our global delivery centers across North America, Asia, and Europe, we deliver strategic technology and business transformation solutions to our clients, enabling them to operate as leaders within their fields.

• Named One of America’s Best Employers for New Grads by Forbes (2024
• Named One of the Best Companies to Work for by U.S. News & World Report (Private Companies List, 2024-2025)
• One of the Largest IT Staffing Firms in the US – Ranked #3 by Staffing Industry Analysts (SIA, 2024)
• One of the Largest Staffing Firms in the US – Ranked #13 by Staffing Industry Analysts (SIA, 2024; includes Innova Solutions, Volt, & HireGenics)
• Named One of the Top Ten Private Companies in Atlanta by the Atlanta Business Chronicle (2023)
• One of the Largest Certified Minority Business Enterprises (MBEs) in the United States (NMSDC, 2024)
• AWS Advanced Tier Services Partner with 100+ certifications

Additional Information

Website: https://www.innovasolutions.com/

Innova Solutions offers a referral bonus for qualified Ambassadors who refer eligible referrals. Submit referrals at https://innovasolutions.workllama.com/atsuser/anonreferafriend and earn $250-$1,000 per referral.

Innova Solutions is an Equal Opportunity Employer and prohibits any kind of unlawful discrimination and harassment. Innova Solutions is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment on the basis of race, color, religion or belief, national origin, citizenship, social or ethnic origin, sex, age, physical or mental disability, veteran status, marital status, domestic partner status, sexual orientation, or any other status protected by the statutes, rules, and regulations in the locations where it operates. If you are an individual with a disability and need a reasonable accommodation to assist with your job search or application for employment, please contact us at [e-mail] or [phone]. Please indicate the specifics of the assistance needed. Innova Solutions encourages all interested and qualified candidates to apply for employment opportunities. Innova Solutions (HireGenics/Volt) does not discriminate against applicants based on citizenship status, immigration status, or national origin, in accordance with 8 U.S.C. § 1324b.

The company will consider for employment qualified applicants with arrest and conviction records in a manner that complies with the San Francisco Fair Chance Ordinance, the Los Angeles Fair Chance Initiative for Hiring Ordinance, and other applicable laws.

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Innova Solutions and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at Privacy Policy - innovasolutions.