Senior Hardware Security Module Engineer - General purpose

About NCR Voyix

NCR Voyix Corporation (NYSE: VYX) is a global platform‑powered leader in unified commerce for shopping and dining. It empowers retailers and restaurants to accelerate new possibilities for their operations, experiences and business outcomes. NCR Voyix is headquartered in Atlanta, Georgia, and serves customers in more than 35 countries worldwide.

Location:

Atlanta, GA (On‑site)

Years of

Experience:

5+ Years

Senior Information Security Engineer will lead the design, implementation, operation, and governance of enterprise Hardware Security Module (HSM) platforms, with a primary focus on Thales Luna HSMs and Thales pay Shield 10. This role is critical to ensuring the security, availability, and compliance of cryptographic services supporting payment processing, identity, encryption key lifecycle management, and regulatory requirements.

• Own end‑to‑end lifecycle management of Thales Luna Network HSM and pay Shield 10 platforms (provisioning, configuration, patching, upgrades, and decommissioning).
• Ensure high availability, resilience, and secure operations for mission‑critical payment and cryptographic workloads.
• Define and enforce key‑management policy (generation, storage, rotation, backup, recovery, and destruction) with dual control.
• Lead break‑glass and physical safe access procedures, including secure custody of HSM artifacts.
• Manage pay Shield 10 integrations for PIN processing, EMV, tokenization, and transaction cryptography.
• Support integrations with payment processors, core banking platforms, and internal applications.
• Drive compliance with PCI DSS, PCI PIN, and related security requirements for payment cryptography.
• Lead audits, risk assessments, and evidence collection for cryptographic controls and HSM usage.
• Develop and maintain SOPs, runbooks, and architecture documentation for HSM services and cryptographic controls.
• Provide technical leadership and mentoring to engineers and operations partners; collaborate across Infrastructure, Cloud, App Dev, IAM, Payments, and Compliance.
• Manage vendor relationships with Thales (support engagements, roadmap alignment, and renewals).

• Bachelor’s degree in computer science, Information Security, Engineering, or related field (or equivalent experience).
• 8+ years in information security, cryptography, or infrastructure security.
• 5+ years managing Thales Luna HSM platforms.
• 3+ years with Thales pay Shield in payment processing environments (pay Shield 10 preferred).
• Strong foundation in cryptography, key lifecycle management, and dual‑control processes; working knowledge of PCI DSS / PCI PIN.
• Experience operating HSMs in highly regulated, 24/7 production environments.

• Experience with cloud‑connected or hybrid HSM deployments (on‑prem + cloud).
• Familiarity with Thales HSMs, key vaults, or enterprise KMS solutions.
• Experience with EMV, PIN translation, tokenization, or payment switch integrations.
• Industry certifications preferred: CISSP, CISM, or CISA.
• PCI Professional (PCIP).
• Thales HSM or pay Shield certifications.

Integrated into our shared values is NCR Voyix’s commitment to equal employment opportunity. All qualified applicants will receive consideration for employment without regard to sex, age, race, color, creed, religion, national origin, disability, sexual orientation, gender identity, veteran status, military service, genetic information, or any other characteristic or conduct protected by law. NCR Voyix is committed to being a globally inclusive company where all people are treated fairly, recognized for their individuality, promoted based on performance and encouraged to strive to reach their full potential.

We believe in understanding and respecting differences among all people. Every individual at NCR Voyix has an ongoing responsibility to respect and support a globally diverse environment.