22 Sep
|
Sperton Global As
|
New South Wales
22 Sep
Sperton Global As
New South Wales
Job Description
Thales HSM Certified Engineer n
Location: Melbourne, Australia | 1 Week Travel to Canberra
Work: Predominantly onsite at a Melbourne Data Centre
Employment Type: Contract – 8–10 Weeks (High Possibility of extension)
Experience: 7–10+ Years
Work Arrangement: Melbourne Data Centre – Onsite
Start: Urgent
Work Rights: Australian Citizens, Permanent Residents or candidates holding a valid Australian Work Visa
Industry: Banking, Financial Services, Payments, Government, Cybersecurity
Why This Role? n
We are looking for an experienced Thales HSM Certified Engineer to support a critical short-term assignment across data centre environments in Melbourne and Canberra .
n
This role is ideal for a specialist with strong hands-on experience in Thales Luna Network HSM and/or Thales payShield platforms , enterprise cryptographic infrastructure, HSM administration, key management and secure credential operations.
n
The assignment is initially for 8–10 weeks , with a strong possibility of extension based on project requirements.
Why Apply for This Role? n
n
- n
Work on a critical enterprise HSM and cryptographic infrastructure project.
n
- n
Gain exposure to data centre environments across Melbourne and Canberra.
n
- n
Work with Thales Luna and/or payShield HSM technologies.
n
- n
Opportunity for further engagement depending on project Phase 2.
n
- n
Short-term contract with competitive/open rates.
n
Key Responsibilities HSM Administration & Operations n
Support HSM activities across data centres in Melbourne and Canberra , including:
n
1. Discovery & Inventory
n
n
- n
Create and maintain a complete inventory of HSMs, including model, serial number, firmware, location, network information, partitions and operational status.
n
- n
Document key inventory, ownership, algorithms, key lengths and lifecycle status.
n
- n
Review licenses, enabled features,
optional modules and support status.
n
- n
Document partition configuration and HSM usage by application/service.
n
n
2. Physical Inspection & Health Assessment
n
n
- n
Physically inspect in-scope HSMs and verify operational status.
n
- n
Review power supplies, fans, batteries, tamper mechanisms and other hardware components.
n
- n
Review hardware error logs, audit logs and system events.
n
- n
Identify failed, degraded, unsupported or end-of-life components.
n
n
3. Credential & Access Validation
n
n
- n
Verify Smart Cards, physical cards, PED keys and authentication devices.
n
- n
Validate applicable ACS and OCS cards.
n
- n
Verify administrative and operational access procedures.
n
- n
Validate HSM Security Officer (SO), Audit Officer (AU), Partition Security Officer (PSO), Partition Owner (PO), Crypto Officer (CO) and Crypto User (CU) roles and credential custodians.
n
n
4. Card & Key Material Management
n
n
- n
Create and validate required CTA, Administrator, LMK and On-Call card sets.
n
- n
Verify secure storage, handling and chain of custody for cards and authentication materials.
n
n
5. Monitoring
n
n
- n
Configure and validate SNMP monitoring and alerting for in-scope HSMs, subject to required licensing, connectivity, platform access, credentials and change approvals.
n
Key Technical Skills n
n
- n
Thales Luna Network HSM
n
- n
Luna Client Software
n
- n
Luna SA
n
- n
Luna PCIe HSM
n
- n
Luna Backup HSM
n
- n
Thales payShield 10K – preferred
n
- n
HSM partition management
n
- n
Enterprise encryption and cryptographic infrastructure
n
- n
Secure key ceremonies
n
- n
Key and credential lifecycle management
n
- n
HSM monitoring and operational support
n
What We’re Looking For n
n
- n
7–10+ years of relevant technical experience.
n
- n
Bachelor's degree in Computer Science, Cybersecurity, Information Technology or a related field.
n
- n
Minimum 5+ years managing enterprise encryption and cryptographic infrastructure .
n
- n
Robust hands-on experience administering Thales HSM solutions in production environments .
n
- n
Experience working in highly regulated environments such as:
n n
- n
Banking & Financial Services
n
- n
Payments / Payment Processing
n
- n
Government
n
- n
Healthcare
n
- n
Critical Infrastructure
n
n
- n
Strong understanding of HSM administration, access control, key management and cryptographic operations.
n
Certifications n
Mandatory / Highly Preferred:
n
n
- n
Thales Luna HSM Certification
n
- n
Thales Certified Security Expert (HCSE) – Luna HSM
n
- n
Thales payShield Certification – where applicable
n
Soft Skills n
n
- n
Strong stakeholder engagement and communication skills.
n
- n
Excellent written and verbal communication.
n
- n
Ability to lead cryptographic governance discussions.
n
- n
Experience working with auditors, risk teams and regulators.
n
- n
Strong problem-solving and incident management capabilities.
n
Industry Experience n
Experience in any of the following environments will be highly regarded:
n
n
- n
Banking & Financial Services
n
- n
Payment Processing Platforms
n
- n
FinTech
n
- n
Card Scheme Certification Programs
n
- n
Government / Critical Infrastructure
n
n
#J-18808-Ljbffr
📌 Thales HSM Certified Engineer (New South Wales)
🏢 Sperton Global As
📍 New South Wales