HSM Managed Services Engineer in New York at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a HSM Managed Services Engineer based in United States.

The HSM Managed Services Engineer will provide day-to-day operational administration and technical support for a critical enterprise Hardware Security Module environment.
You will help maintain a highly available, secure, resilient, and auditable cryptographic infrastructure supporting mission-critical operations.
The role covers HSM monitoring, partition lifecycle management, key management, high availability, disaster recovery, and security controls.
You will work primarily remotely, with limited travel to customer facilities when on-site support is required.
The position requires strong hands-on experience managing HSM environments and the ability to troubleshoot complex operational issues.
You will also contribute to incident response, documentation, SLA reporting, knowledge transfer, and customer personnel training.
This is an opportunity to play a direct role in protecting sensitive cryptographic infrastructure within a demanding enterprise environment.

• Provide remote and on-site administration, troubleshooting, monitoring, and operational support for enterprise HSM environments.
• Continuously monitor appliance health, availability, performance, capacity, partition status, and key-operation failures, maintaining a target availability of at least 99.9% per calendar month.
• Provision, configure, modify, monitor, and securely decommission HSM partitions across dedicated, shared, multi-tenant, and application-specific environments.
• Maintain role-based access controls, privileged-access controls, partition isolation, and secure administrative practices.
• Integrate HSM logging and audit events with enterprise SIEM capabilities to support security monitoring, compliance, and auditability.
• Support high-availability configurations, failover procedures, backup and recovery processes, and disaster recovery capabilities.
• Execute enterprise cryptographic key lifecycle activities, including key generation, rotation, backup, recovery, archival, and secure destruction.
• Participate in documented and witnessed key ceremonies using M-of-N quorum authentication, dual control, and split-knowledge principles.
• Participate in annual disaster recovery exercises and document recovery results, findings, and corrective actions.
• Maintain operational runbooks, standard operating procedures, configuration documentation, and partition-management records.
• Support incident response, root-cause analysis, corrective actions, service-level reporting, and ongoing operational improvements.
• Provide knowledge transfer and hands-on training to customer personnel to strengthen operational capabilities and ensure continuity.

• Demonstrated hands-on experience operating and supporting HSM managed-service or enterprise HSM environments.
• Experience with remote HSM administration, troubleshooting, monitoring, and operational maintenance.
• Proven experience managing the complete HSM partition lifecycle, including provisioning, configuration, modification, monitoring, and secure decommissioning.
• Strong understanding of SIEM and security logging integrations for HSM environments.
• Experience supporting HSM high availability, failover, backup, recovery, and disaster recovery processes.
• Practical knowledge of enterprise cryptographic key lifecycle operations, including generation, rotation, backup, recovery, archival, and destruction.
• Experience participating in secure key ceremonies involving M-of-N quorum authentication, dual control, and split knowledge.
• At least two previous managed HSM engagements demonstrating your responsibilities and the service levels sustained.
• Experience with Thales Luna or equivalent enterprise HSM technologies is strongly preferred.
• OEM HSM administration training or certification is a plus.
• Experience working in federal or Department of Veterans Affairs environments is preferred.
• FedRAMP or cloud-based HSM experience is advantageous where applicable.
• Strong troubleshooting, analytical, documentation, and incident-resolution skills.
• Ability to work independently in a primarily remote environment while maintaining effective communication with customers and technical stakeholders.
• Willingness and ability to travel on a limited basis to customer facilities when required.

• Primarily remote work environment with limited travel requirements.
• Opportunity to support a highly available, secure, and mission-critical enterprise HSM environment.
• Meaningful technical responsibility within a growing organization focused on transformation and customer mission success.
• Collaborative environment where employees are encouraged to contribute ideas and influence how services are delivered.
• Opportunities for professional development, knowledge sharing, and hands-on technical growth.
• Supportive culture emphasizing respect, collaboration, empowerment, and employee contributions.
• Exposure to enterprise cryptographic infrastructure, federal technology environments, SIEM integration, and disaster recovery operations.
• Compensation and additional benefits are subject to the applicable employment package and location.