HSM Engineer

Required Skills & Experience • 8+ years experience as an HSM engineer with a background in enterprise level environments • Knowledge with Data at rest crypto, i.e - Key Management/Lifecycle • Proficient in scripting languages (e.g. Powershell, Python, Perl, JavaScript) • Knowledge of Post Quantum Cryptography and its implications on system security and encryption. • Familiarity with modern security protocols such as TLS and SSH and NIST, ISO, PCI-DSS standards. • Experience working with Cloud Service Providers and key protection. • Excellent communication skills, with the ability to effectively convey complex cryptographic concepts to both technical and non-technical stakeholders. • Experience with HSM and Key Management Products: Thales payShield and SafeNet HSM, Azure Key Vault (AKV), and AWS KMS Job Description Insight Global is seeking a HSM Engineer to join the Global Information Security (GIS) team at a Fortune 50 financial institution. This individual will be responsible for designing, implementing, and securing systems that protect sensitive data and system boundaries while ensuring compliance with banking security, risk, and regulatory requirements. The role involves leading security engineering efforts across the full lifecycle, including defining and documenting system security requirements, driving complex information security projects, and identifying risks and vulnerabilities early to ensure timely delivery. The engineer will support audits and risk assessments, manage compliance deliverables, and collaborate closely with vendors to ensure third‑party applications meet bank standards. They will also interface with infrastructure teams to address technical needs such as storage and system capacity, develop and execute robust security test plans, and apply broad information security expertise to solve complex problems. Success in this role requires strong cross‑functional leadership, the ability to negotiate priorities with diverse stakeholders, and a proactive approach to strengthening security controls and resilience. This is a fully on-site role requiring presence 5 days a week in Denver, CO or Charlotte, NC.