HSM Managed Services Engineer

About the Role

The HSM Managed Services Engineer will provide day-to-day operational administration, monitoring, lifecycle management, availability management, and technical support for the VA's enterprise HSM environment. This position is responsible for maintaining a highly available, secure, and auditable HSM managed service. Primarily remote, with limited travel to the customer facility.

Responsibilities

• Perform remote and on-site HSM administration and operational support.
• Continuously monitor HSM appliance health, availability, performance, capacity, partition status, and key-operation failures.
• Maintain HSM fleet availability of at least 99.9% per calendar month.
• Provision, configure, modify, monitor, and securely decommission HSM partitions.
• Support dedicated, shared, multi-tenant, and application-specific partition models.
• Maintain RBAC, privileged-access controls, partition isolation, and secure administrative practices.
• Integrate HSM logging and audit events with VA SIEM capabilities.
• Support HSM high-availability configurations, failover, backup, recovery, and disaster recovery.
• Execute key generation, rotation, backup, recovery, archival, and destruction activities.
• Participate in documented and witnessed key ceremonies using M-of-N quorum authentication, dual control, and split knowledge.
• Support annual disaster recovery exercises and document recovery results.
• Maintain operational runbooks, SOPs, configuration documentation, and partition-management records.
• Support incident response, root-cause analysis, corrective actions, and SLA reporting.
• Support knowledge transfer and hands-on training of VA personnel.

Requirements

• Hands-on HSM managed-services or operations experience.
• Remote HSM administration and troubleshooting experience.
• HSM partition lifecycle management.
• SIEM/logging integration.
• HSM high availability and disaster recovery.
• Enterprise cryptographic key lifecycle operations.
• At least two prior managed HSM engagements, including evidence of the service levels sustained.

Qualifications

• Experience with Thales Luna or equivalent enterprise HSM technologies.
• OEM HSM administration training/certification.
• Experience with Federal or VA environments.
• FedRAMP cloud HSM experience where applicable.

Why Join Us

• Be part of a quickly growing company that values your voice, ideas, and experience.
• Play a key role in Iron Bow’s transformational shift in delivering value to customers and employees.
• Work with passionate professionals in a culture that fosters respect, support, and empowerment.