HSM Managed Services Engineer

THE OPPORTUNITY

The HSM Managed Services Engineer will provide day-to-day operational administration, monitoring, lifecycle management, availability management, and technical support for the VA's enterprise HSM environment. This position is responsible for maintaining a highly available, secure, auditable HSM managed service.

The candidate must have prior experience operating HSM managed-service environments, including remote administration, partition lifecycle management, SIEM integration, high availability, and disaster recovery. The candidate shall be able to provide at least two prior managed HSM engagements demonstrating the individual's role and the service levels sustained. Primarily remote. Limited travel to customer facility.

HOW YOU'LL MAKE AN IMPACT

• Perform remote and on-site HSM administration and operational support.
• Continuously monitor HSM appliance health, availability, performance, capacity, partition status, and key-operation failures.
• Maintain HSM fleet availability of at least 99.9% per calendar month.
• Provision, configure, modify, monitor, and securely decommission HSM partitions.
• Support dedicated, shared, multi-tenant, and application-specific partition models.
• Maintain RBAC, privileged-access controls, partition isolation, and secure administrative practices.
• Integrate HSM logging and audit events with VA SIEM capabilities.
• Support HSM high-availability configurations, failover, backup, recovery, and disaster recovery.
• Execute key generation, rotation, backup, recovery, archival, and destruction activities.
• Participate in documented and witnessed key ceremonies using M-of-N quorum authentication, dual control, and split knowledge.
• Support annual disaster recovery exercises and document recovery results.
• Maintain operational runbooks, SOPs, configuration documentation, and partition-management records.
• Support incident response, root-cause analysis, corrective actions, and SLA reporting.
• Support knowledge transfer and hands-on training of VA personnel.

SKILLS THAT DRIVE SUCCESS

• Hands-on HSM managed-services or operations experience.
• Remote HSM administration and troubleshooting experience.
• HSM partition lifecycle management.
• SIEM/logging integration.
• HSM high availability and disaster recovery.
• Enterprise cryptographic key lifecycle operations.
• At least two prior managed HSM engagements, including evidence of the service levels sustained.

WHAT SETS YOU APART

• Experience with Thales Luna or equivalent enterprise HSM technologies.
• OEM HSM administration training/certification.
• Experience with Federal or VA environments.
• FedRAMP cloud HSM experience where applicable.

WHY YOU'LL LOVE IT!

• You will be part of a company that is growing quickly and values your voice, ideas, and experience
• You will be a key contributor to Iron Bow’s transformational shift in how we deliver value to both customers and employees.
• You will have the pleasure of working with passionate professionals in a culture that fosters a workplace where everyone feels respected, supported and empowered to succeed.