HSM Engineer; hardware security module

Position: HSM Engineer (hardware security module)- 2745
JOB TITLE: HSM Engineer

LOCATION:

Chandler, AZ or Omaha, NE
INDUSTRY:
Financial Technology

JOB SUMMARY: HSM Engineer role will be responsible for designing, deploying, configuring, and maintaining Hardware Security Modules used to protect sensitive cryptographic keys and perform secure cryptographic operations. This role ensures the security, availability, and compliance of cryptographic infrastructure in alignment with industry standards, security policies, and regulatory requirements.

RESPONSIBILITIES:

• HSM Administration & Operations
• Deploy, configure, and manage HSM devices
• Maintain and update HSM inventory to ensure up-to-date tracking.
• Submit Firewall request to allow network traffic between HSM and client systems
• Manage HSM partitioning, remote HSM administration and auditing functions.
• Conduct firmware and software upgrades while maintaining operational continuity.
• Ensure HSM configurations meet compliance standards (PCI-DSS, PIN, HIPAA, GDPR, ISO 27001, etc.).
• Monitor for unauthorized access or anomalies in cryptographic operations.
• Participate in internal and external security audits.
• Work with development and infrastructure teams to integrate cryptographic services into business applications.
• Troubleshoot HSM integration issues with applications, APIs, and security services.
• Implement automated monitoring and alerting for HSM performance and health.
• Respond to cryptographic security incidents and investigate root causes.
• Provide on-call support for HSM-related issues and outages.

REQUIREMENTS:

• Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).
• 3–5 years of experience in HSM administration and/or cryptographic operations
• Hands-on experience with HSM vendors such as Thales, Entrust, Futurex, Utimaco, or Safe Net.
• Strong understanding of PKI, digital certificates, TLS/SSL, and key management practices.
• Familiarity with security standards: FIPS 140-2/140-3, NIST SP 800 series, PCI-DSS.
• Experience with scripting languages (Python, Power Shell, Bash) for automation.
• May require occasional travel for HSM installation or maintenance.
• On-call rotation for 24/7 HSM support.

About Theoris
Our goal is to Fuel Your Career! As a Theoris team member, you join a culture based on people-centered values and an environment that fosters both personal and professional growth. We build long-term relationships with our clients and our consultants. With over 30 years of building strong relationships in the industry, we’re uniquely positioned to make the right connections. Our recruiting teams are experts dedicated to the information technology and engineering staffing space and are highly respected by our client base.