Sr. Lead Infrastructure Engineer - HSM Management

We are seeking a highly skilled Senior Infrastructure Engineer with deep expertise in infrastructure architecture, system design, and Hardware Security Module (HSM) management, specifically with Thales and FutureX platforms.

The ideal candidate will play a key role in designing, implementing, and maintaining secure, scalable, and resilient infrastructure solutions to support critical business services, with a focus on payments and cryptographic operations.

Key Responsibilities


* Lead the architecture, design, and documentation of complex HSM and cryptographic infrastructure, ensuring alignment with business, resiliency, and security requirements.


* Design and implement HSM solutions (Thales and FutureX), including deployment, configuration, integration, and lifecycle management.


* Develop and maintain detailed architectural diagrams, system documentation, and operational runbooks.


* Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls.


* Oversee the migration, upgrade, and consolidation of HSM infrastructure, ensuring minimal disruption and maximum security.


* Provide expert guidance on cryptographic key management, secure storage, confidential computing, and compliance with industry standards (e.g., PCI DSS, FIPS).


* Troubleshoot and resolve infrastructure and HSM-related issues, performing root cause analysis and implementing corrective actions, leveraging tools such as Splunk.


* Participate in risk assessments, audits, and incident response activities related to infrastructure and HSM environments.


* Mentor junior engineers and contribute to the continuous improvement of infrastructure processes and capabilities.


* Apply domain knowledge of payment processes and business resiliency to infrastructure design and operations.


* Utilize Infrastructure as Code tools such as Terraform for automation and management.

Qualifications


* Bachelor's or Master's degree in Computer Science, Information Technology, or related field.


* 7+ years of hands on engineering experience with HSMs with expertise in architecture & system design of highly available infrastructure, disaster recovery and business continuity strategies.


* Proficient technical troubleshooting skills with strong Linux/Unix Administration skills and experiences.


* Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations.


* Hands-on experience with OpenSSL and certificate-based authentication mechanisms.


* Expertise in public cloud key management and HSMs.


* Proficiency in designing and documenting infrastructure architectures using industry-standard tools.


* Experience with network security, firewalls, and secure room operations and ceremonies is a plus.


* Experience with Splunk for monitoring and troubleshooting.


* Experience with Terraform for infrastructure aut...