Cryptography Engineer - Thales Luna HSM

We are seeking a Cryptography Engineer with a strong background in Hardware Security Modules (HSMs)-specifically Thales Luna HSMs-to join our cybersecurity engineering team. This position demands a detail-oriented individual with hands-on experience in cryptographic key management, secure infrastructure, and HSM operations.

Key Responsibilities:

• Design, deploy, and manage Thales Luna HSM environments and key management workflows.

• Collaborate with DevOps and SecOps teams to integrate HSMs into secure application architectures.

• Monitor and analyze cryptographic system logs using Splunk and SNMP.

• Develop and maintain scripts and configurations using SSH, SSL/TLS, and Git-based workflows (GitHub).

• Document processes, security policies, and configurations using Confluence and Jira.

• Perform advanced data analytics and reporting using Microsoft Excel.

• Triage and manage service issues via ServiceNow, ensuring minimal operational impact.

• Stay current on evolving cryptographic standards, vulnerabilities, and threat intelligence.

Required Skills & Experience:

• Strong hands-on experience with Thales Luna HSMs or other enterprise-grade HSMs.

• Deep knowledge of cryptographic algorithms, key life cycle management, and PKI infrastructure.

• Experience with SNMP monitoring, Splunk log analysis, and secure communications protocols (SSH, SSL).

• Proficient with collaboration tools such as Confluence, Jira, and GitHub.

• Familiarity with incident response platforms like ServiceNow.

• Advanced Excel skills, including macros, pivot tables, and data visualization.

• Excellent problem-solving, documentation, and communication abilities.

Nice to Have:

• Certifications such as CISSP, CEH, or relevant HSM/vendor credentials.

• Familiarity with regulatory compliance (eg, PCI-DSS, FIPS 140-2).

• Experience working in highly regulated or enterprise-scale environments.