HSM Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a HSM Managed Services Engineer based in United States.

The HSM Managed Services Engineer will provide day-to-day operational administration and technical support for a critical enterprise Hardware Security Module environment.

• Provide remote and on-site administration, troubleshooting, monitoring, and operational support for enterprise HSM environments.
• Continuously monitor appliance health, availability, performance, capacity, partition status, and key-operation failures, maintaining a target availability of at least 99.9% per calendar month.
• Provision, configure, modify, monitor, and securely decommission HSM partitions across dedicated, shared, multi-tenant, and application-specific environments.
• Maintain role-based access controls, privileged-access controls, partition isolation, and secure administrative practices.
• Integrate HSM logging and audit events with enterprise SIEM capabilities to support security monitoring, compliance, and auditability.
• Support high-availability configurations, failover procedures, backup and recovery processes, and disaster recovery capabilities.
• Execute enterprise cryptographic key lifecycle activities, including key generation, rotation, backup, recovery, archival, and secure destruction.
• Participate in documented and witnessed key ceremonies using M-of-N quorum authentication, dual control, and split-knowledge principles.
• Participate in annual disaster recovery exercises and document recovery results, findings, and corrective actions.
• Maintain operational runbooks, standard operating procedures, configuration documentation, and partition-management records.
• Support incident response, root-cause analysis, corrective actions, service-level reporting, and ongoing operational improvements.
• Provide knowledge transfer and hands-on training to customer personnel to strengthen operational capabilities and ensure continuity.

• Demonstrated hands-on experience operating and supporting HSM managed-service or enterprise HSM environments.
• Experience with remote HSM administration, troubleshooting, monitoring, and operational maintenance.
• Proven experience managing the complete HSM partition lifecycle, including provisioning, configuration, modification, monitoring, and secure decommissioning.
• Strong understanding of SIEM and security logging integrations for HSM environments.
• Experience supporting HSM high availability, failover, backup, recovery, and disaster recovery processes.
• Practical knowledge of enterprise cryptographic key lifecycle operations, including generation, rotation, backup, recovery, archival, and destruction.
• Experience participating in secure key ceremonies involving M-of-N quorum authentication, dual control, and split knowledge.
• At least two previous managed HSM engagements demonstrating your responsibilities and the service levels sustained.
• Experience with Thales Luna or equivalent enterprise HSM technologies is strongly preferred.
• OEM HSM administration training or certification is a plus.
• Experience working in federal or Department of Veterans Affairs environments is preferred.
• FedRAMP or cloud-based HSM experience is advantageous where applicable.
• Strong troubleshooting, analytical, documentation, and incident-resolution skills.
• Ability to work independently in a primarily remote environment while maintaining effective communication with customers and technical stakeholders.
• Willingness and ability to travel on a limited basis to customer facilities when required.

• Primarily remote work environment with limited travel requirements.
• Opportunity to support a highly available, secure, and mission-critical enterprise HSM environment.
• Meaningful technical responsibility within a growing organization focused on transformation and customer mission success.
• Collaborative environment where employees are encouraged to contribute ideas and influence how services are delivered.
• Opportunities for professional development, knowledge sharing, and hands-on technical growth.
• Supportive culture emphasizing respect, collaboration, empowerment, and employee contributions.
• Exposure to enterprise cryptographic infrastructure, federal technology environments, SIEM integration, and disaster recovery operations.
• Compensation and additional benefits are subject to the applicable employment package and location.