VS
Security Specialist Sr – HSM Authentication / Encryption Key Lifecycle
Veracity Software Inc
🇺🇸 United States
Remote
Senior
12 months ago
- PKI
- Network Security
- Oracle
- Key Vault
- AWS
- Azure
- GCP
- Python
- PowerShell
- Dynatrace
- Power BI
- Jira
- Confluence
- CISSP
- CISM
12 months ago
Pittsburgh, PA
Full Time
Scheduled work from home days
2 days in office, or for emergencies so needs to be within reasonable distance
We are seeking an experiencedSenior Security Specialist with hands-on expertise inHardware Security Modules (HSMs),encryption key lifecycle management, and cryptographic solutions. This person will play a critical role in enhancing our organization's enterprise key management capabilities and contributing to our security infrastructure in a regulated environment.
Key Responsibilities
- Serve as SME for enterprise encryption and HSMs (Thales/nShield/Cloud HSMs).
- Implement and manage encryption key lifecycle processes: generation, storage, distribution, archival, and destruction.
- Conduct and documentkey ceremonies, enforcedual control, and ensurechain of custody.
- PerformHSM lifecycle tasks: initialization, configuration, updates, tamper handling, and decommissioning.
- Develop and implement cryptographic policies and solutions based on business needs.
- MaintainSecure Room infrastructure and access policies.
- Collaborate with security, infrastructure, and application teams for key and encryption management.
- Monitor and improve cryptographic controls based on security assessments and risk evaluations.
- Draft SOPs, policies, and control documentation ensuring alignment with standards and regulations.
Must Have:
- Hands-on experience withThales ornShield HSMs
- Proficiency inencryption key lifecycle management, includingkey ceremonies
- Strong knowledge ofcryptographic concepts (PKI, AES, RSA, etc.)
- Experience working in aregulated or banking environment
- Understanding ofaccess control,network security, anddata loss prevention
- Comfortable working in hybrid (onsite/offsite) setup
- Experience withThales CipherTrust,CKKM,Oracle Key Vault
- Familiarity withBYOK/HYOK in AWS, Azure, or GCP
- Exposure to scripting (Python, PowerShell)
- Knowledge ofDynatrace,PowerBI,Jira,Confluence, andLogScale
- Any relevantsecurity certifications (CISSP, CISM, GIAC)
Skill Matrix Template –
Full Name:
Degree Major with University and Completion Year:
Total Experience in Cybersecurity / IT Security:
Total Experience with Hardware Security Modules (HSMs):
Which HSMs have you worked with? (e.g., Thales, nShield, Cloud HSMs):
Experience with Encryption Key Lifecycle Management? (Describe scope – ceremonies, dual control, tools used):
Have you worked in a banking or highly regulated industry? (If yes, describe the environment):
Experience with Secure Room operations or PED-based ceremonies?
Experience with Thales CipherTrust Manager, CCKM, Oracle Key Vault (Yes/No – Please elaborate):
Cloud encryption expertise (BYOK/HYOK in AWS, Azure, GCP)?
Scripting knowledge (e.g., Python, PowerShell)?
Experience with security reporting tools (e.g., PowerBI, Dynatrace, LogScale)?
Security Certifications (CISSP, GIAC, CISM, etc.):
Are you within commuting distance of Pittsburgh, PA? (Yes/No):
Willing to work 2 days onsite as needed? (Yes/No):
Motivation/Reason for Interest in This Position:
Motivation/Reason for Relocation (if not local to Pittsburgh):
Contact Number:
Email ID:
LinkedIn Profile URL:
Full Address (Street, City, State, ZIP Code):
Notice Period (in weeks):
Current Work Authorization Status (e.g., US Citizen, Green Card, H1B, etc.):
Expected Salary:
Are you willing to relocate at your own expense and work hybrid in Pittsburgh, PA (Yes/No):
Security Specialist Sr – HSM Authentication / Encryption Key Lifecycle · Veracity Software Inc