Security Engineer III - HSM Management

Build and secure critical cryptographic infrastructure for payment operations in a role focused on Hardware Security Module (HSM) management. This onsite position in Plano, TX supports business continuity through secure design, resilient operations, and disciplined security documentation across enterprise platforms.

You will help deliver secure, scalable, and resilient infrastructure by leading HSM architecture and lifecycle management, partnering with cross-functional teams on standards and controls, and ensuring alignment with PCI DSS and FIPS expectations.

Responsibilities

• Lead architecture, design, and documentation of complex HSM and cryptographic infrastructure to meet business, resiliency, and security requirements
• Design and implement HSM solutions across Thales and FutureX, covering deployment, configuration, integration, and full lifecycle management
• Develop and maintain architectural diagrams, system documentation, and operational runbooks to support operational excellence and knowledge continuity
• Collaborate with cross-functional teams to define infrastructure standards, best practices, and security controls aligned with firm-wide policies and industry regulations
• Oversee migration, upgrade, and consolidation of HSM infrastructure while minimizing disruption and maximizing security during transitions
• Provide guidance on cryptographic key management, secure storage, confidential computing, and compliance with PCI DSS and FIPS
• Troubleshoot HSM and infrastructure issues, performing root cause analysis and implementing corrective actions using monitoring tools
• Participate in risk assessments, audits, and incident response activities for infrastructure and HSM environments
• Apply knowledge of payment processes and business resiliency in infrastructure design and operational decision-making
• Use enterprise-authorized AI capabilities to accelerate threat modeling, vulnerability analysis synthesis, and security documentation, with validation practices that ensure sensitive data handling
• Apply reuse-first, AI-assisted practices in SDLC and toolchain routines to strengthen security testing and control validation, supporting traceability and auditability

Requirements

• Formal training or certification on security engineering concepts, with years applied experience
• Hands-on engineering experience with HSMs, including architecture and system design for highly available infrastructure, disaster recovery, and business continuity strategies
• Experience with network security, firewalls, and secure room operations and key ceremonies
• Strong technical troubleshooting skills with Linux and Unix administration experience in enterprise environments
• Proficiency in designing and documenting infrastructure architectures using industry-standard tools and methodologies
• Experience with infrastructure automation tools such as Terraform for managing and scaling secure environments
• Hands-on experience with OpenSSL and certificate-based authentication mechanisms
• Demonstrated experience using enterprise-authorized AI within the work environment to support security engineering workflows, including validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring alignment to security, resiliency, and auditability expectations

Preferred Qualifications, Capabilities and Skills

• Hands-on experience with Splunk or equivalent platforms for infrastructure monitoring and troubleshooting
• Strong domain knowledge of payment processes and business resiliency applied to infrastructure design
• Relevant HSM platform certifications, such as Thales or FutureX credentials
• Strong understanding of cryptographic principles, key management, confidential computing, and secure hardware operations

Technologies

Hardware Security Module (HSM), Thales, FutureX, Terraform, Linux, Unix, OpenSSL, PCI DSS, FIPS, Splunk, SDLC