Crypto HSM Engineer

Location: South East London

Job Title:

Crypto HSM Engineer

Job Description This role focuses on enhancing hardware security module (HSM) observability across a large, global encryption estate. You will use your expertise with leading HSM platforms and monitoring tools to design, implement and refine a robust monitoring and alerting solution. The position combines deep cryptographic engineering knowledge with strong observability, infrastructure and cybersecurity skills to improve resilience, monitoring capabilities and response times for critical cryptographic services.

Responsibilities Design, implement and support a new monitoring and alerting solution for HSMs based on Splunk. Use your in-depth knowledge of at least one leading payment or crypto HSM platform and configure data collection from these devices via SNMP. Pull and interpret relevant operational and security data from HSMs, ensuring it is correctly ingested, parsed and visualised in Splunk. Collaborate closely with team members as a subject matter expert for specific HSM platforms, while contributing to observability across other HSM technologies.

Work with stakeholders to understand detailed requirements and translate them into technical designs and monitoring use cases. Write clear design documents and test specifications for your areas of responsibility within the observability project. Contribute to comprehensive project documentation, including architecture descriptions, runbooks and operational procedures. Help define and refine the roadmap for continuous improvement in the management and monitoring of cryptographic services.

Identify and flag potential issues early, propose pragmatic solutions and contribute creative ideas to improve resilience and observability. Collaborate with technology teams to move monitoring and cryptographic concepts from lab or pilot phases into production-ready, scalable solutions. Support the development of effective operational models to ensure new capabilities are fully utilised and can grow to meet evolving business needs. Essential Skills Strong expertise in at least one major HSM platform such as payment or crypto HSMs, with the motivation and ability to build working expertise across other leading platforms.

Good knowledge of HSM operations and how HSM monitoring works, including hands-on experience with SNMP-based monitoring. Practical experience with Splunk for monitoring, alerting, dashboards and log analysis. experience with core infrastructure and operations tools such as SNMP, SSH, SSL, Confluence, Jira, Service Now and Git Hub. Ability to perform advanced data analysis in Excel to interpret monitoring data and metrics.

Solid understanding of cryptography concepts and cryptographic modules, for example TPMs and related solutions. Understanding of cybersecurity principles and how they apply to cryptographic services in large organisations. Knowledge of global financial services business models and awareness of regional compliance standards, local regulations and applicable laws. Familiarity with industry cybersecurity frameworks, standards and methodologies, including OWASP, ISO 2700x, PCI DSS, GLBA, GDPR, global data security and privacy acts, FFIEC guidelines, CIS controls and NIST standards.

Good understanding of IT infrastructure platforms and technologies, including Windows and Linux server administration. Understanding of SSH and SSL functionality and usage in secure infrastructures. experience working with technology teams to move solutions from lab or proof-of-concept stages into production, including building effective operational models. Strong stakeholder management skills, with experience understanding and meeting the needs of multiple stakeholders. Demonstrated ability to contribute actively as part of a team, including participating in discussions, listening to others and collaborating constructively.

Innovative mindset, with the confidence to propose new ideas and challenge existing approaches when appropriate. Strong documentation skills, including the ability to produce clear, structured and comprehensive technical documentation. Additional

Skills & Qualifications experience with Public Key Infrastructure (PKI) and related technologies. Knowledge of encryption key management practices and solutions. Understanding of cybersecurity governance and its relationship to cryptographic services. experience with Windows administration and Linux administration beyond basic usage. Familiarity with SSL VPN solutions and secure…