Security Engineer-Architect

Experteer Overview In this role you will design, implement, and operate enterprise key management solutions to protect sensitive data. You will work within the security team to ensure cryptographic key lifecycle practices meet standards and regulatory requirements. You will support automation, incident response, and cross-functional collaboration to embed key management into broader security initiatives. This role offers the chance to impact data protection at scale using Thales HSM and modern KMS technologies. Compensation / Benefits * Design, implement, and maintain secure key management solutions and cryptographic key lifecycle processes * Manage generation, distribution, storage, rotation, and monitoring of cryptographic keys * Build and maintain highly resilient, secure key management systems * Ensure compliance with security standards and participate in audits * Respond to security incidents involving cryptographic keys and implement corrective actions * Collaborate with security, operations, clients, partners, and vendors to integrate key management across initiatives * Maintain technical documentation, diagrams, configurations, and incident records * Conduct knowledge-sharing sessions on key management and cryptographic security * Support automation of key lifecycle management using scripting and orchestration tools Tasks * Hands-on experience with HSM and KMS, including mandatory experience with Thales HSM products * Experience with key management systems (HSM, KMS, PKI) * Strong understanding of cryptographic algorithms, protocols, and key lifecycle management * Experience with NIST, ISO 27001, and PCI DSS frameworks * Familiarity with cloud KMS (AWS KMS, Azure Key Vault) * Experience with Utimaco, Thales, Entrust, Gemalto, Vormetric, or CipherTrust Manager * Proficiency in Linux and Windows * Strong scripting/automation in Python, Perl, or PowerShell * Programming experience in Java or Go * Experience with Ansible, Terraform, CI/CD, and DevOps * Knowledge of monitoring tools (Splunk, Elastic, Prometheus/Grafana, ELK) * Experience with JIRA, Agile Scrum, and incident tools (Remedy or ServiceNow) * Ability to produce technical documentation and diagrams * Bachelor’s degree in Computer Science, Information Security, or related field * 5-10 years of relevant experience * Certifications such as CISSP, CISM, or CEH are a plus Key requirements *

to operations, clients, partners, and vendors to integrate key management across initiatives * Maintain technical documentation, diagrams, configurations, and incident records * Conduct knowledge-sharing sessions on key management and cryptographic security * Support automation of key lifecycle management using scripting and orchestration tools Tasks * Hands-on experience with HSM and KMS, including mandatory experience with Thales HSM products * Experience with key management systems (HSM, KMS, PKI) * Strong understanding of cryptographic algorithms, protocols, and key lifecycle management * Experience with NIST, ISO 27001, and PCI DSS frameworks * Familiarity with cloud KMS (AWS KMS, Azure Key Vault) * Experience with Utimaco, Thales, Entrust, Gemalto, Vormetric, or CipherTrust Manager * Proficiency in Linux and Windows * Strong scripting/automation in Python, Perl, or PowerShell * Programming experience in Java or Go * Experience with Ansible, Terraform, CI/CD, and DevOps * aaaaaaaB _ of monitoring tools (Splunk, Elastic, Prometheus/Grafana, ELK) * Experience with JIRA, Agile Scrum, and incident tools (Remedy or ServiceNow) * Ability to produce technical documentation and diagrams * Bachelor’s degree in Computer Science, Information Security, or related field * 5-10 years of relevant experience * Certifications such as CISSP, CISM, or CEH are a plus Key requirements *