HSM Software Engineer

Cisco

10d • Hybrid

About The Position

As a Hardware Security Module (HSM) engineer in the Cryptographic Services group, you will tackle sophisticated technical security challenges supporting Cisco’s critical business. You will maintain and deploy HSM’s and maintain critical key material for the organization on a Public Key Infrastructure (PKI) team. The role offers the opportunity to work both with traditional on-prem infrastructure while supporting critical key operations in cloud environments. The Hardware Security Module Engineering role will leverage a diverse suite of tools including PKICS#11, Terraform, Git, Ansible, Kubernetes and AWS cloud utilities.

Requirements

• Proficient with Infrastructure as Code (IaC) with experience integrating Terraform with both cloud and on-prem infrastructure.
• Skilled with Automation and Orchestration with proven experience leveraging Ansible playbooks, GitLab, and Argo CD workflows for Kubernetes-native environments.
• Hands-on experience with public cloud platforms (e.g. AWS, Azure, GCP) and hybrid cloud environments.
• Proficient with Terraform configurations, Ansible playbooks, and Kubernetes YAML manifests.
• Experience with configuration validation, linting and automated testing of IaC code.

Nice To Haves

• Key management technologies and practices. Understanding of asymmetric and symmetric cryptography (RSA, ECC, AES, etc.).
• Hardware Security Module management/deployment (i.e. Thales, Utimaco).
• Accustomed to working in highly secure environments that can include FedRAMP, and IL5.
• Accustomed to working within an environment that leverages and promotes AI.
• Cross-team collaboration with application teams and internal Cisco clients.

Responsibilities

• Collaborate with service managers, application developers, and technical leaders to optimize infrastructure workloads in a hybrid cloud environment
• Support critical systems and infrastructure in a 24x7 enterprise or service provider environment.
• Manage physical installation and maintenance of hardware security modules (e.g. Thales, Utimaco).
• Secure, maintain, and wield critical key material in support of engineering business units and product teams.
• Automate and orchestrate workflows in hybrid cloud environments in support of critical API applications for internal client teams.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed