Security Encryption HSM Specialist for Banking project

Summary

- Duration: potentially long term
- Location: The first priority should be the USA (Employment contract) and Canada + potentially we could look at European locations like Poland (B2B), Bulgaria (B2B), Romania (B2B), Slovakia, and Czechia (Employment contract, TBC), but candidates should be ready to have least 4h overlap with Texas (USA).

Project Description

As an Encryption HSM Specialist, became a part of a cross-functional development team working with an American bank chartered in Texas. It has 155 branches and is one of the 60 largest banks in the US by total assets operating on the FIS Profile core-banking system.

Responsibilities:

• HSM administration: Installing, configuring, and maintaining HSM devices, managing key lifecycle processes including generation, distribution, rotation, and destruction.
• Key management: Implementing robust key management policies, defining access controls, and ensuring proper key usage across applications and systems.
• Cryptographic operations: Performing encryption and decryption functions using HSM capabilities for sensitive data like financial transactions, personal information, and digital signatures.
• Compliance management: Ensuring adherence to security standards and regulations like PCI DSS, HIPAA, and GDPR by utilizing HSM features for data protection.
• Security audits and monitoring: Performing regular security assessments of HSM infrastructure, identifying potential vulnerabilities, and implementing necessary mitigation strategies. 

Requirements:

• Strong understanding of cryptography principles, including symmetric and asymmetric encryption algorithms.
• Expertise in HSM technologies and vendors (e.g., Thales, Utimaco, Entrust).
• Knowledge of key management practices and best practices for secure key lifecycle management.
• Familiarity with relevant security standards and compliance requirements.
• Experience with scripting languages and system administration tasks to integrate HSMs with applications.
• Strong problem-solving and troubleshooting abilities to address security incidents related to HSM operations.
• Familiarity with financial services domain and customer profile data.
• Knowledge of relevant regulations and compliance requirements.
• Excellent communication and collaboration skills to work with cross-functional teams.
• Problem-solving and analytical abilities.
• Ability to handle technical complexity and manage multiple projects.
• Strong documentation and technical writing skills.