HSM Cyber Security Engineer

Purview is a global leader in IT-Engineering and Talent Solutions, trusted by Fortune 500 and mid-market clients across 21+ countries. Headquartered in Edinburgh, with delivery center's in India, our 1,200+ professionals drive meaningful digital transformation worldwide.

As a certified Ethnic Minority Business and Premier Member of MSDUK, we proudly blend diversity with deep technical expertise to deliver results that matter.

We’re currently hiring for the below role with one of our valued clients. If it aligns with your experience and aspirations, we’d love to hear from you!

Role: HSM Cyber Security Engineer

Location: Glasgow,UK (Location)

Job Type: Hybrid work mode (3 days per week On-Site)

Job Description ::

Ideally we would have someone who has experience in automating the upgrades and testing of our CTM and HSM devices

Role:

• Build and Maintain cryptographic infrastructure, including Hardware Security Modules (HSMs) and key management platforms.

• Manage encryption key lifecycle processes (generation, rotation, archival, destruction) aligned with Firm security standards.

• Integrate cryptographic services with enterprise applications using protocols such as KMIP and PKCS#11.

• Collaborate with cybersecurity, risk, and compliance teams to ensure adherence to regulatory and internal control requirements.

• Troubleshoot and resolve complex issues related to cryptographic systems and vaults.

• Maintain documentation, assist customers through FAQ entries and similar

• Drive automation and process improvements for certificate and key management workflows.

• Interact regularly with team members and occasionally leadership on a range of security topics

Skills Required

• Understanding of encryption key lifecycle management, including generation, rotation, archival, and destruction.

• Experience in supporting cryptographic infrastructure and key management platforms such as CipherTrust Manager and Luna Hardware Security Modules.

• Experience in automation and scripting (e.g., PowerShell, Python) for operational efficiency.

• Ability to integrate cryptographic services with enterprise applications using protocols like KMIP and PKCS#11.

• Proficiency in Linux or other Unix variant

• Experience/Knowledge with Observability tools such as Prometheus and Grafana

• Understanding of regulatory requirements and risk controls related to cryptographic infrastructure.

• Ability to process information, translate into plans and present summaries to stakeholders.

• Experienced understanding of business line and discipline.