Crypto HSM Engineer in Bottesford

Job Title: Crypto HSM Engineer Job Description This role focuses on enhancing hardware security module (HSM) observability across a large, global encryption estate.
Scroll down for a complete overview of what this job will require Are you the right candidate for this opportunity
You will use your expertise with leading HSM platforms and monitoring tools to design, implement and refine a robust monitoring and alerting solution.
The position combines deep cryptographic engineering knowledge with strong observability, infrastructure and cybersecurity skills to improve resilience, monitoring capabilities and response times for critical cryptographic services.
Responsibilities Design, implement and support a new monitoring and alerting solution for HSMs based on Splunk.
Use your in-depth knowledge of at least one leading payment or crypto HSM platform and configure data collection from these devices via SNMP.
Pull and interpret relevant operational and security data from HSMs, ensuring it is correctly ingested, parsed and visualised in Splunk.
Collaborate closely with team members as a subject matter expert for specific HSM platforms, while contributing to observability across other HSM technologies.
Work with stakeholders to understand detailed requirements and translate them into technical designs and monitoring use cases.
Write clear design documents and test specifications for your areas of responsibility within the observability project.
Contribute to comprehensive project documentation, including architecture descriptions, runbooks and operational procedures.
Help define and refine the roadmap for continuous improvement in the management and monitoring of cryptographic services.
Identify and flag potential issues early, propose pragmatic solutions and contribute creative ideas to improve resilience and observability.
Collaborate with technology teams to move monitoring and cryptographic concepts from lab or pilot phases into production-ready, scalable solutions.
Support the development of effective operational models to ensure new capabilities are fully utilised and can grow to meet evolving business needs.
Essential Skills Strong expertise in at least one major HSM platform such as payment or crypto HSMs, with the motivation and ability to build working expertise across other leading platforms.
Good knowledge of HSM operations and how HSM monitoring works, including hands-on experience with SNMP-based monitoring.
Practical experience with Splunk for monitoring, alerting, dashboards and log analysis.
experience with core infrastructure and operations tools such as SNMP, SSH, SSL, Confluence, Jira, ServiceNow and GitHub.
Ability to perform advanced data analysis in Excel to interpret monitoring data and metrics.
Solid understanding of cryptography concepts and cryptographic modules, for example TPMs and related solutions.
Understanding of cybersecurity principles and how they apply to cryptographic services in large organisations.
Knowledge of global financial services business models and awareness of regional compliance standards, local regulations and applicable laws.
Familiarity with industry cybersecurity frameworks, standards and methodologies, including OWASP, ISO 2700x, PCI DSS, GLBA, GDPR, global data security and privacy acts, FFIEC guidelines, CIS controls and NIST standards.
Good understanding of IT infrastructure platforms and technologies, including Windows and Linux server administration.
Understanding of SSH and SSL functionality and usage in secure infrastructures.
experience working with technology teams to move solutions from lab or proof-of-concept stages into production, including building effective operational models.
Strong stakeholder management skills, with experience understanding and meeting the needs of multiple stakeholders.
Demonstrated ability to contribute actively as part of a team, including participating in discussions, listening to others and collaborating constructively.
Innovative mindset, with the confidence to propose new ideas and challenge existing approaches when appropriate.
Strong documentation skills, including the ability to produce clear, structured and comprehensive technical documentation.
Additional Skills & Qualifications experience with Public Key Infrastructure (PKI) and related technologies.
Knowledge of encryption key management practices and solutions.
Understanding of cybersecurity governance and its relationship to cryptographic services.
experience with Windows administration and Linux administration beyond basic usage.
Familiarity with SSL VPN solutions and secure remote access technologies.
Academic or professional qualification in cryptography or cyber security.
Formal education in Information Security, Cybersecurity, Computer Science or a related field, and/or equivalent demonstrated work experience.
Industry qualifications such as CISSP, CISA or similar recognised certifications in information security.
experience working with PKI infrastructure, cryptography and SSL in complex environments.
experience using collaboration and documentation tools such as Confluence and Jira in engineering or security projects.
Why Work Here? You will join a stable and professional team that operates at the heart of a global cryptographic and cybersecurity environment.
The role offers a clearly defined scope of responsibilities and an interesting career path within an international organisation, giving you the opportunity to deepen your expertise in HSMs, cryptography and observability.
You will benefit from private health care and a range of employee benefits, while working in a culture that values innovation, collaboration and continuous improvement.
Work Environment You will work within an international, enterprise-scale environment where cryptography underpins the security of high-value financial transactions.
The role involves close collaboration with security, infrastructure and application teams, using technologies such as HSMs, Splunk, SNMP, SSH, SSL, PKI, Windows and Linux servers, ServiceNow, GitHub, Confluence and Jira.
You can expect a consistent scope of responsibilities within a structured yet innovative setting, with a focus on resilience, monitoring and continuous enhancement of cryptographic services.
The environment supports professional growth, structured documentation and adherence to recognised cybersecurity standards and frameworks.
Location London, UK Trading as TEKsystems.
Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom.
No.
.
Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003.
TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group").
Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands.
If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and Eur opean Economic Area subject to the protections described in the Allegis Group Online Privacy Notice.
We store personal data in the UK, EEA, Switzerland and the USA.
If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at for details on how to contact us.
To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request.
If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S.
Privacy Shield or the Swiss-U. xwwtmva S.
Privacy Shield.