Sr. Lead Infrastructure Engineer - HSM Management

Testing Site - JPMC; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Testing Site - JPMC is seeking a Senior Infrastructure Engineer to design, implement, and secure HSM-based cryptographic infrastructure. You will own architecture, documentation, and lifecycle management for critical payments systems.

Responsibilities include migration and consolidation of HSMs, key management guidance, and incident response. Strong leadership and cloud/key management experience are essential.

Qualifications

• 7+ years hands-on engineering experience with HSMs and highly available infrastructure
• Strong Linux/Unix administration skills
• Experience with OpenSSL and certificate-based authentication
• Proficiency in cloud key management and HSMs
• Excellent problem solving, communication, and leadership skills
• Relevant Thales/FutureX HSM certifications are desirable

Responsibilities

• Lead architecture, design, and documentation of HSM and cryptographic infrastructure
• Design and implement HSM solutions (Thales and FutureX) including deployment and lifecycle management
• Develop architectural diagrams, system documentation, and runbooks
• Collaborate with teams to define infrastructure standards and security controls
• Oversee migration, upgrade, and consolidation of HSM infrastructure
• Provide guidance on key management, PCI DSS and FIPS compliance
• Troubleshoot infra issues using tools like Splunk
• Participate in risk assessments, audits, and incident response
• Mentor junior engineers and improve infra processes
• Apply payment process knowledge to infrastructure design and operations
• Use Terraform for IaC automation

Skills

HSM administration

Linux administration

OpenSSL

Terraform

Splunk

Cryptographic principles

Leadership

Problem solving

Education

Bachelor's or Master's in CS/IT

Tools

Terraform

OpenSSL

Splunk

HSM platforms

Job description

We are seeking a highly skilled Senior Infrastructure Engineer with deep expertise in infrastructure architecture, system design, and Hardware Security Module (HSM) management, specifically with Thales and FutureX platforms. The ideal candidate will play a key role in designing, implementing, and maintaining secure, scalable, and resilient infrastructure solutions to support critical business services, with a focus on payments and cryptographic operations.

Key Responsibilities

• Lead the architecture, design, and documentation of complex HSM and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements.
• Design and implement HSM solutions (Thales and FutureX), including deployment, configuration, integration, and lifecycle management.
• Develop and maintain detailed architectural diagrams, system documentation, and operational runbooks.
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls.
• Oversee the migration, upgrade, and consolidation of HSM infrastructure, ensuring minimal disruption and maximum security.
• Provide expert guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards (e.g., PCI DSS, FIPS).
• Troubleshoot and resolve infrastructure and HSM-related issues, performing root cause analysis and implementing corrective actions, leveraging tools such as Splunk.
• Participate in risk assessments, audits, and incident response activities related to infrastructure and HSM environments.
• Mentor junior engineers and contribute to the continuous improvement of infrastructure processes and capabilities.
• Apply domain knowledge of payment processes and business resiliency to infrastructure design and operations.

• Utilize Infrastructure as Code tools such as Terraform for automation and management.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, or related field.
• 7+ years of hands on engineering experience with HSMs with expertise in architecture & system design of highly available infrastructure, disaster recovery and business continuity strategies.
• Proficient technical troubleshooting skills with strong Linux/Unix Administration skills and experiences.
• Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• Expertise in public cloud key management and HSMs.
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools.
• Experience with network security, firewalls, and secure room operations and ceremonies is a plus.
• Experience with Splunk for monitoring and troubleshooting.
• Experience with Terraform for infrastructure automation.
• Strong domain knowledge of payment processes and business resiliency.
• Excellent problem-solving, communication, and leadership skills.
• Relevant certifications (e.g., Thales/FutureX HSM certifications) are highly desirable.

#CTC