Security Specialist Sr – HSM Authentication / Encryption Key Lifecycle jobs in United States
cer-icon
Apply on Employer Site
company-logo

Veracity Software Pvt. Ltd. · 3 months ago

Security Specialist Sr – HSM Authentication / Encryption Key Lifecycle

Veracity Software Pvt. Ltd. is seeking an experienced Senior Security Specialist with expertise in Hardware Security Modules and encryption key lifecycle management. The role involves enhancing enterprise key management capabilities and contributing to the organization's security infrastructure in a regulated environment.

Information Technology & Services

Responsibilities

Serve as SME for enterprise encryption and HSMs (Thales/nShield/Cloud HSMs)
Implement and manage encryption key lifecycle processes: generation, storage, distribution, archival, and destruction
Conduct and document key ceremonies, enforce dual control, and ensure chain of custody
Perform HSM lifecycle tasks: initialization, configuration, updates, tamper handling, and decommissioning
Develop and implement cryptographic policies and solutions based on business needs
Maintain Secure Room infrastructure and access policies
Collaborate with security, infrastructure, and application teams for key and encryption management
Monitor and improve cryptographic controls based on security assessments and risk evaluations
Draft SOPs, policies, and control documentation ensuring alignment with standards and regulations

Qualification

HSMs (Thales/nShield)Encryption key lifecycle managementCryptographic conceptsRegulated environment experienceAccess controlNetwork securityData loss preventionScripting PythonScripting PowerShellThales CipherTrustCKKMOracle Key VaultDynatracePowerBIJiraConfluenceLogScaleSecurity certifications

Required

Hands-on experience with Thales or nShield HSMs
Proficiency in encryption key lifecycle management, including key ceremonies
Strong knowledge of cryptographic concepts (PKI, AES, RSA, etc.)
Experience working in a regulated or banking environment
Understanding of access control, network security, and data loss prevention
Comfortable working in hybrid (onsite/offsite) setup

Preferred

Experience with Thales CipherTrust, CCKM, Oracle Key Vault
Familiarity with BYOK/HYOK in AWS, Azure, or GCP
Exposure to scripting (Python, PowerShell)
Knowledge of Dynatrace, PowerBI, Jira, Confluence, and LogScale
Any relevant security certifications (CISSP, CISM, GIAC)

Company

Veracity Software Pvt. Ltd.

twitter
company-logo
At Veracity, if you have an idea you want to validate, a product you need to build, or an existing product that needs optimization, our teams are trained to jump in wherever needed.

Funding

Current Stage
Growth Stage
Company data provided by crunchbase