Security Specialist Sr - HSM Authentication / Encryption Key LifecycleWe are seeking an experienced Senior Security Specialist with hands-on expertise in Hardware Security Modules (HSMs), encryption key lifecycle management, and cryptographic solutions. This person will play a critical role in enhancing our organization's enterprise key management capabilities and contributing to our security infrastructure in a regulated environment.Key ResponsibilitiesServe as SME for enterprise encryption and HSMs (Thales/nShield/Cloud HSMs).Implement and manage encryption key lifecycle processes: generation, storage, distribution, archival, and destruction.Conduct and document key ceremonies, enforce dual control, and ensure chain of custody.Perform HSM lifecycle tasks: initialization, configuration, updates, tamper handling, and decommissioning.Develop and implement cryptographic policies and solutions based on business needs.Maintain Secure Room infrastructure and access policies.Collaborate with security, infrastructure, and application teams for key and encryption management.Monitor and improve cryptographic controls based on security assessments and risk evaluations.Draft SOPs, policies, and control documentation ensuring alignment with standards and regulations.Required & Preferred SkillsMust Have:Hands-on experience with Thales or nShield HSMsProficiency in encryption key lifecycle management, including key ceremoniesStrong knowledge of cryptographic concepts (PKI, AES, RSA, etc.)Experience working in a regulated or banking environmentUnderstanding of access control, network security, and data loss preventionComfortable working in hybrid (onsite/offsite) setupPreferred:Experience with Thales CipherTrust, CCKM, Oracle Key VaultFamiliarity with BYOK/HYOK in AWS, Azure, or GCPExposure to scripting (Python, PowerShell)Knowledge of Dynatrace, PowerBI, Jira, Confluence, and LogScaleAny relevant security certifications (CISSP, CISM, GIAC)
Unknown Company