Azure & Thales HSM Specialist

We are looking for a highly skilled and motivated Thales HSM Specialist with strong Microsoft Azure expertise, especially in cryptography and payment systems. The ideal candidate should possess deep understanding of Thales Hardware Security Modules (HSMs), cryptographic key lifecycle management, and practical experience with Azure Payment HSM offering.

Key Responsibilities:

• Manage and configure Thales HSM devices, including key generation, import/export, and secure application integration.
• Design and implement secure payment operations leveraging HSMs in compliance with PCI-DSS and industry standards.
• Work with Azure services to support HSM integration, including Azure Key Vault and Azure Payment HSM.
• Troubleshoot and optimize cryptographic services for performance, compliance, and security.
• Collaborate with cloud architects and security teams to enforce cryptographic policies and secure key usage.
• Support and enhance security for payment processing systems involving encryption/decryption, tokenization, and secure key injection.
• Document key management practices, HSM configurations, and support operations runbooks.

Required Skills & Experience

• Strong hands-on experience with Thales payShield or Luna HSMs.
• In-depth knowledge of cryptographic algorithms, PKI, and key management practices.
• Hands-on experience with Azure Payment HSM or Azure Key Vault Managed HSM.
• Knowledge of payment systems, EMV, HSM-based PIN processing, and secure remote key loading.
• Familiarity with PCI DSS and other regulatory compliance frameworks.
• Solid understanding of Microsoft Azure ecosystem, including networking, security, and identity management.
• Experience in scripting or automation for HSM operations (PowerShell, Bash, etc.)

Preferred Qualifications:

• Azure certifications such as Azure Security Engineer Associate or Azure Solutions Architect.
• Certifications in cryptography or security (e.g., CISSP, CISM, Certified Encryption Specialist).
• Prior experience with cloud-native payment applications or fintech environments.