Security Engineer-Architect

Apptad Inc; Arizona; On-site; USD 130,000 - 210,000; Full time

Job summary

Apptad Inc. is seeking an experienced Security Engineer/Architect (HSM/KMS) in Arizona to design and maintain enterprise key management systems. The role requires hands-on Thales HSM experience and strong cryptographic lifecycle expertise.

The candidate will implement secure key management, ensure regulatory compliance, and collaborate with security, operations, clients, and vendors. Strong scripting (Python/PowerShell) and DevOps practices are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5–10 years of experience in key management, cryptographic security, or a related field.
• Experience with HSMs, KMS, and PKI.
• Familiar with security frameworks such as NIST, ISO 27001, and PCI DSS.
• Experience with cloud KMS services like AWS KMS and Azure Key Vault.
• Proficiency with Linux and Windows environments.
• Scripting and automation using Python, Perl, or PowerShell.
• Programming experience in Java or Go.
• Experience with Ansible, Terraform, CI/CD, and DevOps practices.
• Familiarity with monitoring tools such as Splunk, Elastic, Prometheus/Grafana, ELK.
• Experience with JIRA, and incident tools Remedy or ServiceNow.
• Ability to produce technical documentation and architectural diagrams from requirements.

Responsibilities

• Design, implement, and maintain secure key management solutions and cryptographic workflows.
• Manage generation, distribution, storage, rotation, and monitoring of cryptographic keys.
• Build resilient, secure key management systems with high availability.
• Ensure compliance with security standards and participate in audits.
• Respond to security incidents involving keys and implement corrective actions.
• Collaborate with security, operations, clients, partners, and vendors to embed KMS practices.
• Maintain detailed architecture diagrams, configurations, and incident records.
• Lead knowledge-sharing sessions on key management and cryptographic security.
• Automate key lifecycle management using scripting and orchestration tools.

Skills

HSM

KMS

Thales HSM products

PKI

NIST framework

Cloud KMS

AWS KMS

Azure Key Vault

Linux

Windows

Python

Perl

PowerShell

Java

Go

Ansible

Terraform

Splunk

Grafana

Prometheus

Kubernetes

Remedy

ServiceNow

JIRA

Education

Bachelor's degree in Computer Science or Information Security

Tools

Terraform

Ansible

Remedy

ServiceNow

Splunk

Grafana

Prometheus

Kubernetes

Job description

We are seeking an experienced Security Engineer/Architect (HSM/KMS) to design, implement, and maintain enterprise key management solutions that protect sensitive data. The ideal candidate will have strong experience with Thales HSM products, cryptographic key lifecycle management, and security best practices aligned with NIST and industry standards.

Key Responsibilities:

• Design, implement, and maintain secure key management solutions and cryptographic key lifecycle processes.
• Manage the generation, distribution, storage, rotation, and monitoring of cryptographic keys.
• Build and maintain highly resilient, redundant, and secure key management systems.
• Ensure compliance with internal security standards and regulatory frameworks, and participate in security audits and assessments.
• Respond to security incidents involving cryptographic keys and implement corrective actions.
• Collaborate with security, operations, clients, partners, and vendors to integrate key management practices into broader security initiatives.
• Maintain detailed technical documentation, architectural diagrams, configurations, and incident response records.
• Conduct knowledge-sharing sessions on key management and cryptographic security best practices.
• Support automation of key lifecycle management using scripting and orchestration tools.

Required Skills & Experience:

• Strong security background with hands‑on experience in HSM and KMS, including mandatory experience with Thales HSM products.
• Experience with key management systems and technologies such as HSM, KMS, and PKI.
• Strong understanding of cryptographic algorithms, protocols, and key lifecycle management.
• Experience with security frameworks including NIST, ISO 27001, and PCI DSS.
• Familiarity with cloud key management services such as AWS KMS and Azure Key Vault.
• Experience with Utimaco, Thales, Entrust, Gemalto, Vormetric, or CipherTrust Manager.
• Proficiency in Linux and Windows environments.
• Strong scripting and automation experience using Python, Perl, or PowerShell.
• Programming experience with Java or Go.
• Experience with Ansible, Terraform, CI/CD pipelines, and DevOps practices.
• Familiarity with monitoring tools such as Splunk, Elastic, Prometheus/Grafana, and ELK.
• Experience with JIRA, Agile Scrum methodologies, and incident management tools such as Remedy or ServiceNow.
• Ability to produce technical documentation and architectural diagrams from business and technical requirements.
• Bachelor's degree in Computer Science, Information Security, or related experience.
• 5 10 years of experience in key management, cryptographic security, or a related field.
• Relevant certifications such as CISSP, CISM, or CEH are a plus.