HSM Managed Services Engineer

Accountabilities

• • Provide remote and on-site administration, troubleshooting, monitoring, and operational support for enterprise HSM environments.
  • Continuously monitor appliance health, availability, performance, capacity, partition status, and key-operation failures, maintaining a target availability of at least 99.9% per calendar month.
  • Provision, configure, modify, monitor, and securely decommission HSM partitions across dedicated, shared, multi-tenant, and application-specific environments.
  • Maintain role-based access controls, privileged-access controls, partition isolation, and secure administrative practices.
  • Integrate HSM logging and audit events with enterprise SIEM capabilities to support security monitoring, compliance, and auditability.
  • Support high-availability configurations, failover procedures, backup and recovery processes, and disaster recovery capabilities.
  • Execute enterprise cryptographic key lifecycle activities, including key generation, rotation, backup, recovery, archival, and secure destruction.
  • Participate in documented and witnessed key ceremonies using M-of-N quorum authentication, dual control, and split-knowledge principles.
  • Participate in annual disaster recovery exercises and document recovery results, findings, and corrective actions.
  • Maintain operational runbooks, standard operating procedures, configuration documentation, and partition-management records.
  • Support incident response, root-cause analysis, corrective actions, service-level reporting, and ongoing operational improvements.
  • Provide knowledge transfer and hands-on training to customer personnel to strengthen operational capabilities and ensure continuity.

  Requirements

  • Demonstrated hands-on experience operating and supporting HSM managed-service or enterprise HSM environments.
  • Experience with remote HSM administration, troubleshooting, monitoring, and operational maintenance.
  • Proven experience managing the complete HSM partition lifecycle, including provisioning, configuration, modification, monitoring, and secure decommissioning.
  • Strong understanding of SIEM and security logging integrations for HSM environments.
  • Experience supporting HSM high availability, failover, backup, recovery, and disaster recovery processes.
  • Practical knowledge of enterprise cryptographic key lifecycle operations, including generation, rotation, backup, recovery, archival, and destruction.
  • Experience participating in secure key ceremonies involving M-of-N quorum authentication, dual control, and split knowledge.
  • At least two previous managed HSM engagements demonstrating your responsibilities and the service levels sustained.
  • Experience with Thales Luna or equivalent enterprise HSM technologies is strongly preferred.
  • OEM HSM administration training or certification is a plus.
  • Experience working in federal or Department of Veterans Affairs environments is preferred.
  • FedRAMP or cloud-based HSM experience is advantageous where applicable.
  • Strong troubleshooting, analytical, documentation, and incident-resolution skills.
  • Ability to work independently in a primarily remote environment while maintaining effective communication with customers and technical stakeholders.
  • Willingness and ability to travel on a limited basis to customer facilities when required.

  Benefits

  • Primarily remote work environment with limited travel requirements.
  • Opportunity to support a highly available, secure, and mission-critical enterprise HSM environment.
  • Meaningful technical responsibility within a growing organization focused on transformation and customer mission success.
  • Collaborative environment where employees are encouraged to contribute ideas and influence how services are delivered.
  • Opportunities for professional development, knowledge sharing, and hands-on technical growth.
  • Supportive culture emphasizing respect, collaboration, empowerment, and employee contributions.
  • Exposure to enterprise cryptographic infrastructure, federal technology environments, SIEM integration, and disaster recovery operations.
  • Compensation and additional benefits are subject to the applicable employment package and location.