Senior HSM Architect - Crypto Infra, PCI/DSS & Compliance

Cybersecurity Jobs; Plano (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Cybersecurity Jobs in Plano, TX is seeking an experienced security engineer to lead the architecture and management of HSM-based cryptographic infrastructure for payment operations. This onsite role focuses on secure design, resilience, and rigorous security documentation across enterprise platforms.

You will drive HSM lifecycle management, align with PCI DSS and FIPS standards, and collaborate with cross-functional teams to implement robust key management, secure storage, and confidential

Qualifications

• Hands-on experience with HSMs, including architecture and high-availability design.
• Experience with network security, firewalls, and secure room operations and key ceremonies.
• Proficiency with Linux/Unix administration in enterprise environments.
• Ability to design infrastructure using industry-standard tools and methodologies.
• Experience with Terraform for infrastructure automation.

Responsibilities

• Lead architecture, design, and documentation of complex HSM and cryptographic infrastructure to meet business, resiliency, and security requirements
• Design and implement HSM solutions across Thales and FutureX, covering deployment, configuration, integration, and full lifecycle management
• Develop architectural diagrams, system documentation, and runbooks to support operational excellence and knowledge continuity
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations
• Oversee migration, upgrade, and consolidation of HSM infrastructure while minimizing disruption and maximizing security during transitions
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIPS
• Troubleshoot HSM and infrastructure issues, performing root cause analysis and implementing corrective actions using monitoring tools
• Participate in risk assessments, audits, and incident response activities for infrastructure and HSM environments
• Apply knowledge of payment processes and business resiliency in infrastructure design and operational decision-making
• Use enterprise-authorized AI capabilities to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, with validation practices that ensure sensitive data handling
• Apply reuse-first, AI-assisted practices in SDLC and toolchain routines to strengthen security testing and control validation, supporting traceability and auditability

Skills

HSM architecture

Security engineering

Troubleshooting

Cross-functional collaboration

Education

Security engineering certification

Tools

Terraform

OpenSSL

Splunk

Linux

Unix

Job description

Cybersecurity Jobs in Plano, TX is seeking an experienced security engineer to lead the architecture and management of HSM-based cryptographic infrastructure for payment operations. This onsite role focuses on secure design, resilience, and rigorous security documentation across enterprise platforms.

You will drive HSM lifecycle management, align with PCI DSS and FIPS standards, and collaborate with cross-functional teams to implement robust key management, secure storage, and confidential