Job Description
Insight Global is seeking a HSM Engineer to join the Global Information Security (GIS) team at a Fortune 50 financial institution. This individual will be responsible for designing, implementing, and securing systems that protect sensitive data and system boundaries while ensuring compliance with banking security, risk, and regulatory requirements. The role involves leading security engineering efforts across the full lifecycle, including defining and documenting system security requirements, driving complex information security projects, and identifying risks and vulnerabilities early to ensure timely delivery. The engineer will support audits and risk assessments, manage compliance deliverables, and collaborate closely with vendors to ensure third‑party applications meet bank standards. They will also interface with infrastructure teams to address technical needs such as storage and system capacity, develop and execute robust security test plans, and apply broad information security expertise to solve complex problems. Success in this role requires strong cross‑functional leadership, the ability to negotiate priorities with diverse stakeholders, and a proactive approach to strengthening security controls and resilience. This is a fully on-site role requiring presence 5 days a week in Denver, CO or Charlotte, NC.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Required Skills & Experience
• 8+ years experience as an HSM engineer with a background in enterprise level environments
• Knowledge with Data at rest crypto, i.e - Key Management/Lifecycle
• Proficient in scripting languages (e.g. Powershell, Python, Perl, JavaScript)
• Knowledge of Post Quantum Cryptography and its implications on system security and encryption.
• Familiarity with modern security protocols such as TLS and SSH and NIST, ISO, PCI-DSS standards.
• Experience working with Cloud Service Providers and key protection.
• Excellent communication skills, with the ability to effectively convey complex cryptographic concepts to both technical and non-technical stakeholders.
• Experience with HSM and Key Management Products: Thales payShield and SafeNet HSM, Azure Key Vault (AKV), and AWS KMS
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.