Senior HSM/KMS Security Architect

Apptad Inc; Arizona; On-site; USD 130,000 - 210,000; Full time

Job summary

Apptad Inc. is seeking an experienced Security Engineer/Architect (HSM/KMS) in Arizona to design and maintain enterprise key management systems. The role requires hands-on Thales HSM experience and strong cryptographic lifecycle expertise.

The candidate will implement secure key management, ensure regulatory compliance, and collaborate with security, operations, clients, and vendors. Strong scripting (Python/PowerShell) and DevOps practices are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5–10 years of experience in key management, cryptographic security, or a related field.
• Experience with HSMs, KMS, and PKI.
• Familiar with security frameworks such as NIST, ISO 27001, and PCI DSS.
• Experience with cloud KMS services like AWS KMS and Azure Key Vault.
• Proficiency with Linux and Windows environments.
• Scripting and automation using Python, Perl, or PowerShell.
• Programming experience in Java or Go.
• Experience with Ansible, Terraform, CI/CD, and DevOps practices.
• Familiarity with monitoring tools such as Splunk, Elastic, Prometheus/Grafana, ELK.
• Experience with JIRA, and incident tools Remedy or ServiceNow.
• Ability to produce technical documentation and architectural diagrams from requirements.

Responsibilities

• Design, implement, and maintain secure key management solutions and cryptographic workflows.
• Manage generation, distribution, storage, rotation, and monitoring of cryptographic keys.
• Build resilient, secure key management systems with high availability.
• Ensure compliance with security standards and participate in audits.
• Respond to security incidents involving keys and implement corrective actions.
• Collaborate with security, operations, clients, partners, and vendors to embed KMS practices.
• Maintain detailed architecture diagrams, configurations, and incident records.
• Lead knowledge-sharing sessions on key management and cryptographic security.
• Automate key lifecycle management using scripting and orchestration tools.

Skills

HSM

KMS

Thales HSM products

PKI

NIST framework

Cloud KMS

AWS KMS

Azure Key Vault

Linux

Windows

Python

Perl

PowerShell

Java

Go

Ansible

Terraform

Splunk

Grafana

Prometheus

Kubernetes

Remedy

ServiceNow

JIRA

Education

Bachelor's degree in Computer Science or Information Security

Tools

Terraform

Ansible

Remedy

ServiceNow

Splunk

Grafana

Prometheus

Kubernetes

Job description

Apptad Inc. is seeking an experienced Security Engineer/Architect (HSM/KMS) in Arizona to design and maintain enterprise key management systems. The role requires hands-on Thales HSM experience and strong cryptographic lifecycle expertise.

The candidate will implement secure key management, ensure regulatory compliance, and collaborate with security, operations, clients, and vendors. Strong scripting (Python/PowerShell) and DevOps practices are essential.