This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are hiring a CipherTrust Engineer – HSM to join our client’s enterprise information security and cryptography engineering team on a contract basis. This is a fantastic opportunity to work with one of the most innovative financial services organizations in the U.S., supporting large-scale encryption, key management, and hardware security infrastructure initiatives. In this role, you will help design, implement, and manage enterprise cryptographic platforms, ensuring the secure generation, storage, and lifecycle management of encryption keys used across payment systems, cloud platforms, and databases. You will collaborate with security engineers, infrastructure teams, and application developers to support secure architecture and deliver enterprise-grade encryption solutions.
Job Responsibility:
Implement and manage Hardware Security Modules (HSMs) and enterprise key management platforms
Administer and manage cryptographic key lifecycle operations, including generation, rotation, revocation, and secure storage
Work with teams to define and implement key management and encryption standards across enterprise systems
Configure and support enterprise encryption platforms such as CipherTrust Manager and HSM infrastructure
Integrate cryptographic solutions with cloud key management services and enterprise applications
Support database encryption initiatives, including Transparent Data Encryption (TDE) for enterprise databases
Collaborate with infrastructure, security, and DevOps teams to ensure secure cryptographic implementations
Participate in proof-of-concept initiatives and assist with design validation, implementation, and production deployment
Ensure compliance with information security policies, regulatory requirements, and risk management frameworks
Requirements:
3–5+ years of experience in information security engineering, cryptography, or security infrastructure roles
Hands-on experience with Hardware Security Modules (HSMs) such as Thales payShield or SafeNet/Luna HSM
Experience with enterprise key management platforms, particularly CipherTrust Manager
Knowledge of key lifecycle management and enterprise encryption practices
Experience integrating encryption with cloud platforms such as Azure Key Vault or AWS Key Management Service (KMS)
Experience supporting database encryption technologies, including SQL Server TDE or Oracle TDE
Familiarity with cryptographic standards and APIs such as PKCS#11 or KMIP
Experience with scripting or automation using tools such as PowerShell, Python, or similar languages
Strong collaboration skills and the ability to work across infrastructure, security, and application teams
Nice to have:
Experience in financial services, payment systems, or highly regulated environments is a plus