We are seeking an experienced Hardware Security Module (HSM) Migration Engineer Contractor to support the migration of enterprise cryptographic infrastructure. The role involves contributing to the planning, coordination, and execution of HSM migration activities while ensuring the confidentiality, integrity, and availability of cryptographic keys and related payment-processing services.
Roles & Responsibilities
- Participate in end-to-end planning and execution of HSM migration initiatives.
- Support migration of cryptographic keys, certificates, and configurations between HSM platforms.
- Ensure minimal disruption to payment processing and security services during migration.
- Collaborate with security, infrastructure, and application teams to validate integrations.
- Perform post-migration validation, testing, and troubleshooting to ensure system stability.
- Maintain detailed documentation of migration procedures, configurations, and outcomes.
- Adhere to organizational and regulatory security standards throughout the migration lifecycle.
The ideal candidate will have strong hands-on experience administering and migrating HSM platforms within highly regulated industries such as financial services, payment processing, or enterprise security operations.
Required Technical / Functional Skills
- 5+ years of hands-on experience supporting enterprise Hardware Security Module (HSM) environments.
- Proven experience in HSM-to-HSM migration projects, including planning, execution, and validation.
- Strong background in payment systems, financial services, or other highly regulated environments.
- Solid experience in Linux and Windows system administration.
- Strong troubleshooting skills with the ability to analyze and resolve complex infrastructure and cryptographic issues.
- Excellent technical documentation skills, including runbooks, migration plans, and post-migration reports.
Preferred Skills (Managerial / Domain Knowledge)
- Experience with payment processing ecosystems and card security programs.
- Working knowledge of EMV standards, PIN encryption, tokenization, and transaction security concepts.
- Exposure to cloud-integrated HSM solutions and hybrid on-prem/cloud environments.
- Familiarity with PCI-DSS and NIST security frameworks is a strong plus.