Senior Security Engineer

Insight Global is seeking a Senior Security Engineer to join the Global Information Security (GIS) team at a Fortune 50 financial institution. This ideal candidate will design, implement, and maintain cryptographic security appliances and services as part of the team. This role partners with business and technology stakeholders to assess application requirements, recommend cryptographic solutions, and deliver compliant key management and HSM platforms integrated with enterprise applications. Responsibilities include developing solution prototypes, collaborating across engineering and operations teams, and administering cryptographic keys with full lifecycle management and centralized access controls aligned to security standards. This is a fully on-site role requiring presence 5 days a week in Denver, CO or Charlotte, NC.
HSM and Key Management Products:
• Thales payShield and SafeNet HSM
• Azure Key Vault (AKV)
• AWS KMS
• Key lifecycle management and policy enforcement across environments
• Enterprise cryptography standards implementation
• Database encryption with Microsoft SQL TDE and Oracle TDE with PKCS11 and KMP compliant products

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• Implement best practices per Oasis KMP2 standards, EJB/Java Global Platform, MultiOS, ANSI, FIPS 140-2, NIST SP 800-57, PCI DSS, and GDPR.
• Hands-on experience with Windows/Linux platforms and working knowledge of OpenShift and container-based technologies.
• RESTful services, cloud-native applications, PKCS#11, JCE, .NET, MQ, PKI, HSM, CNG.
• Experience with Kubernetes and OpenShift container orchestration.
• REST API tooling such as Postman or Insomnia.
• Monitoring and log ingestion using Splunk and SNMP v3.
• Agile methodologies, especially Kanban.
• Configuration, patching, and lifecycle management of cryptographic devices.
• Cloud HSM implementation using Azure Key Vault, AWS KMS, or GCP.

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.