HSM Engineer - Progilisys

We are seeking a skilled HSM Engineer with expertise in implementing Hardware Security Modules (HSMs) and managing complex public key infrastructure (PKI) environments. The ideal candidate will be responsible for designing, deploying, configuring, and maintaining HSM servers within Azure environments to ensure high security and optimal performance of cryptographic operations and will be responsible for ensuring the security and compliance of critical digital systems, with a focus on FIPS 140-2 validation, digital certificates, and compliance with federal regulations such as FedRAMP and FISMA.

Job Type: Contract 3 months

Work Location: Fully remote in the US

Responsibilities:

• Design, implement, and manage Hardware Security Modules (HSMs) to safeguard cryptographic keys, ensuring compliance with FIPS 140-2 standards.
• Lead the deployment and administration of public key infrastructures (PKIs), including digital certificate (X.509) management and lifecycle processes.
• Develop and maintain secure communications through digital certificate infrastructure and cryptographic technologies.
• Implement and manage Trusted Service Managers (TSMs) and Host Card Emulation (HCE) environments to support secure mobile transactions.
• Ensure compliance with federal security standards, including FedRAMP, FISMA, and Evaluation Assurance Level (EAL) protocols.
• Collaborate with cross-functional teams to integrate security solutions into existing infrastructure, ensuring consistent application of security controls.
• Conduct security assessments and audits, addressing vulnerabilities and risks to maintain a secure environment.
• Stay current on evolving security threats and regulatory changes, providing guidance and updates to stakeholders.

Skills and Experience:

• Strong experience in Windows security environments with demonstrated expertise in HSM implementation and management.
• In-depth understanding of HSM technologies, including Thales or SafeNet HSMs.
• Proficiency in Azure, including Azure Active Directory, networking, and security groups.
• PowerShell scripting for automation and task management.
• Understanding of PKI, including X.509 certificates and public key cryptography.
• Familiarity with FIPS 140-2, FedRAMP, FISMA, and EAL regulations and frameworks.
• Experience with Trusted Service Managers (TSM) and Host Card Emulation (HCE) in secure mobile applications.
• Solid knowledge of network security, encryption protocols, and cryptographic best practices.
• Strong analytical and problem-solving skills, with the ability to troubleshoot and resolve complex security issues.
• Excellent communication skills, with the ability to collaborate across teams to drive security initiatives.