Security Engineer III - HSM Management

Security Engineer III - HSM Management will help design, build, and operate secure infrastructure supporting critical payment and cryptographic workloads. The role is centered on Hardware Security Module (HSM) management, cryptographic key management, and maintaining strong security controls with resiliency and business continuity in mind.

Responsibilities

• Lead architecture, design, and documentation for complex Hardware Security Module and cryptographic infrastructure, aligning with business, resiliency, and security requirements.
• Design and implement HSM solutions, covering deployment, configuration, integration, and end-to-end lifecycle management across Thales and FutureX platforms.
• Create and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity.
• Partner with cross-functional teams to set infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations.
• Oversee migration, upgrade, and consolidation activities for HSM infrastructure, aiming for minimal disruption while maintaining strong security during transitions.
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIPS requirements.
• Troubleshoot and resolve infrastructure and HSM-related issues, conducting root cause analysis and implementing corrective actions informed by monitoring tools.
• Participate in risk assessments, audits, and incident response activities for infrastructure and HSM environments.
• Apply domain knowledge of payment processes and business resiliency to infrastructure design and operational decisions.
• Use enterprise-authorized AI capabilities to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, with output validation and appropriate handling of sensitive data.
• Apply reuse-first, AI-assisted approaches within SDLC and toolchain routines to strengthen security testing and control validation, ensuring traceability and alignment to resiliency and security expectations.

Required Qualifications

• Formal training or certification on security engineering concepts and years applied experience.
• Hands-on engineering experience with Hardware Security Modules, including architecture and system design for highly available infrastructure, disaster recovery, and business continuity strategies.
• Experience with network security, firewalls, and secure room operations, including key ceremonies.
• Strong technical troubleshooting capability with Linux and Unix administration experience in enterprise environments.
• Proficiency designing and documenting infrastructure architectures using industry-standard tools and methodologies.
• Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments.
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms.
• Demonstrated ability to use enterprise-authorized AI capabilities within the work environment to support security engineering workflows, with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted code or security recommendations before adoption, escalating uncertainty as needed to ensure outcomes align to security, resiliency, and auditability expectations.

Technologies

• Hardware Security Module (HSM)
• Thales
• FutureX
• Terraform
• Linux
• Unix
• OpenSSL
• PCI DSS
• FIPS
• Splunk
• SDLC

Preferred Qualifications and Capabilities

• Hands-on experience with Splunk (or equivalent platforms) for infrastructure monitoring and troubleshooting.
• Strong domain knowledge of payment processes and business resiliency applied to infrastructure design.
• Relevant HSM platform certifications such as Thales or FutureX credentials.
• Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.

Work Location

Plano, TX (onsite)