Security & HSM Architect

Security & HSM ArchitectRemote | Global This is highly urgent - we can only consider those that can start by the first week of October (working part-time is a possibility)We are looking for an experienced Security & HSM Architect to design the end-to-end security architecture for a highly secure platform deployed within enterprise and government data centres.The platform operates on-premise within air-gapped environments, so this role requires genuine expertise in cryptography, PKI and Hardware Security Modules. This is primarily an architecture and advisory engagement: you will develop the security design and implementation plan, with an established team of DevOps and Platform Engineers responsible for delivery.Key ResponsibilitiesDesign the end-to-end security architecture for on-premise, air-gapped environmentsDefine identity, encryption, certificate and key-management strategiesDesign PKI hierarchies covering certificate issuance, rotation, revocation and offline root CAsArchitect HSM-backed key management, including deployment, integration, high availability and recoveryEstablish secure key lifecycle processes, key ceremonies, quorum controls and operator accessDesign secrets management, mTLS, workload identity and zero-trust controlsConduct threat modelling and security architecture reviewsProduce clear architecture documents, security plans and implementation guidanceAdvise enterprise and government clients on secure data-centre deploymentsGuide DevOps and Platform Engineering teams throughout implementationEssential ExperienceProven experience designing enterprise-level security architectureStrong hands-on knowledge of Hardware Security Modules in production environmentsEnd-to-end understanding of PKI, cryptography and key lifecycle managementExperience with major HSM technologies such as Thales Luna, Entrust nShield, Utimaco or equivalentStrong understanding of PKCS#11, encryption standards, key ceremonies and certificate managementExperience designing security for on-premise or air-gapped data centresAbility to solve complex security problems and translate designs into practical implementation plansExperience operating within highly secure enterprise, government, defence or similarly regulated environments