Production Support Engineer – Cryptography / HSM

We need to output HTML fragment with sections: About the role? Actually we have a job summary and description. We need to use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate. We need to parse content: The posting includes: - Intro paragraph about New Era Technology (People First etc). That could be "About the role" or maybe "About the company". But we only have allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to map content accordingly. We have: Job Summary: description of role. Key Responsibilities: list. Required Experience: bullet? Actually "Required Experience 5–10+ years..." then "Key Responsibilities" list. Required Technical Skills: list. Education: Bachelor's degree... Preferred Skills: list. Work Environment: details about full-time contractor, on-site, locations, time zones, weekend work, on-call. Qualifications and Competencies: list of competencies. Candidate Profile: similar to required. Engagement Objectives: list. We need to decide sections: - About the role: could include the introductory paragraph and job summary. - Responsibilities: the Key Responsibilities list. - Requirements: could include Required Experience, Required Technical Skills, Education, maybe also Qualifications and Competencies? But Qualifications is separate heading allowed. We have both Requirements and Qualifications headings. We need to decide what goes where. Typically Requirements = mandatory experience/skills; Qualifications = desired/preferred? But we have also Skills heading. The instructions: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Skills). So we can have multiple sections. We need to include only sections with real specific content. We have content for About the role, Responsibilities, Requirements (experience, technical skills, education), Qualifications (maybe the Qualifications and Competencies section), Skills (maybe Preferred Skills or Required Technical Skills? But we already used Required Technical Skills under Requirements; maybe Skills heading for Preferred Skills). Benefits: we have mention of competitive benefits in intro but no specifics. The instruction: never create Benefits section unless posting actually states them. It says "enjoy competitive benefits" but not specific. That's vague; maybe we should not create Benefits section because no specific benefits listed. Pay: not specified. Schedule: we have work environment details: full-time, 12-month contractor, on-site 3-4 days per week, weekend work may be required, on-call rotation. That's schedule info. So we can include Schedule section with those details. Thus sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Schedule. We must not include Benefits, Pay. Now we need to format lists with

• . For prose use

  . We must preserve all substantive information; do not invent or summarize away detail. So we need to include all details from the posting, but we can condense into bullet points but must preserve meaning. We cannot omit details. However we can combine similar items but must not lose info. The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." That means we cannot leave out any detail. So we need to include everything. That's a lot. We'll need to include each bullet point as

• . For paragraphs, we keep as

  . We must not repeat job title as heading. The job title is "Production Support Engineer". Not to be used as heading. We must not include Job ID etc. We need to strip boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. At end there is privacy policy and scam warning; we need to remove that. Now let's extract content. Full posting text: "Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we're committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale. At New Era, you'll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service. If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together Job Summary New Era Technology is seeking an experienced Production Support Engineer to support enterprise cryptographic platforms and services. This role will provide operational support, engineering, and platform stewardship for critical security infrastructure used to protect sensitive data, keys, credentials, and authentication workflows across the enterprise. The selected candidate will support enterprise cryptography operations, platform administration, key lifecycle management, application onboarding, high availability/disaster recovery (HA/DR), automation, incident response, and audit readiness. The ideal candidate will have hands-on experience with Oracle Key Vault, Thales Hardware Security Modules (HSMs), Thales Cipher Trust, or similar key management, encryption, and cryptographic control platforms. Required Experience 5–10+ years of experience in production support, infrastructure security, cybersecurity engineering, IAM, PKI, or enterprise cryptographic services. Key Responsibilities Provide production support for enterprise cryptography platforms, ensuring high availability, operational stability, and timely incident response. Administer and support Oracle Key Vault, Thales HSMs, Thales Cipher Trust, and comparable key management/encryption platforms. Perform installation, configuration, upgrades, patching, backup/recovery, and lifecycle maintenance of cryptographic platforms and appliances. Manage cryptographic key lifecycle processes, including secure generation, storage, rotation, escrow/backup, archival, revocation, and decommissioning. Support high availability and disaster recovery capabilities for critical authentication and cryptographic infrastructure. Partner with application, infrastructure, IAM, and security engineering teams to integrate applications with cryptographic services using KMIP, PKCS#11, JCE, CNG/KSP, APIs, and related protocols. Troubleshoot production incidents involving encryption, certificate/key management, platform connectivity, authentication dependencies, and HSM availability. Lead or contribute to root cause analysis, problem management, and continuous improvement for recurring issues. Develop and maintain operational procedures, support documentation, runbooks, and controls evidence. Support audit, risk, and compliance activities and adherence to FIPS 140-2/3, PCI DSS, NIST, ISO 27001, and related enterprise controls. Automate routine operational tasks using Python, Shell, Bash, or PowerShell. Participate in on-call support rotation and planned maintenance activities for critical security services. Required Technical Skills Candidates should have strong hands-on experience in most of the following areas: Oracle Key Vault Thales Luna, pay Shield, or general Thales HSM platforms Thales Cipher Trust Manager / Cipher Trust encryption or key management services Enterprise key management, HSM, or data protection technologies Key management and encryption principles PKI and certificate management Cryptographic algorithms and protocols such as AES, RSA, ECC, TLS/SSL, SSH, and X.509 Linux and/or Windows server administration in an enterprise environment Troubleshooting across network, operating system, middleware, authentication, and application layers HA/DR architecture and operational resiliency Change, incident, and problem management processes Scripting and automation using Python, Shell, Bash, or PowerShell Education Bachelor's degree in computer science, Information Security, Engineering, or a related field, or equivalent practical experience. Preferred Skills Experience working in a highly regulated environment, preferably financial services. Experience supporting privileged access management, web authentication, IAM, or adjacent cybersecurity infrastructure. Familiarity with cloud key management/HSM services such as AWS CloudHSM, Azure Dedicated HSM, or cloud-native KMS offerings. Experience integrating cryptographic platforms with enterprise applications, databases, file encryption, tokenization, or secrets-management services. Prior leadership, mentoring, or technical lead experience. Work Environment This is a full-time, 12-month staff augmentation contractor engagement. On-site support is required 3–4 days per week. Preferred locations are New York City, NY and Pittsburgh, PA. Lake Mary, FL and Jersey City, NJ are also acceptable. The role may require support across different time zones. Participation in weekend work may be required for Change Management activities. Participation in an on-call support rotation is required. Qualifications and Competencies The successful candidate should demonstrate: Excellent attention to detail. Strong organizational skills. Excellent analytical skills. Excellent documentation skills. Demonstrated proficiency in Microsoft Office, including Word, Excel, and PowerPoint. Ability to work collaboratively both in person and virtually using Microsoft Teams or similar tools. Ability to work as a liaison between business and information security/information technology teams. Flexibility to accommodate working across different time zones. Excellent interpersonal communication skills with strong spoken and written English. Business-outcomes mindset. Strong balance of strategic thinking and attention to detail. Self-starter with the ability to take initiative. Strong understanding of key management and encryption principles. Strong understanding of PKI and certificate management. Strong understanding of cryptographic algorithms and protocols such as AES, RSA, ECC, TLS/SSL, SSH, and X.509. Experience troubleshooting across network, operating system, middleware, authentication, and application layers. Familiarity with HA/DR architecture, operational resiliency, and change/incident/problem management processes. Strong verbal and written communication skills, with the ability to work across engineering, operations, security, risk, and audit teams. Candidate Profile The ideal candidate will have hands-on experience supporting enterprise cryptography platforms and services, including technologies such as Oracle Key Vault, Thales Hardware Security Modules (HSMs), Thales Cipher Trust, or similar key management, encryption, and cryptographic control platforms. Engagement Objectives Maintain strong operational stability and support coverage for critical enterprise cryptographic and authentication services. Improve platform resiliency, automation, and onboarding efficiency. Reduce operational risk through strong controls, documentation, and lifecycle governance. Serve as a trusted technical partner for application teams, engineering teams, and control functions. This is an onsite role, candidates should locate in commutable distance from any of these locations New York City, NY or Pittsburgh, PA preferred; Lake Mary, FL and Jersey City, NJ." Now we need to map to sections. About the role: Could include the introductory paragraph (Join New Era Technology...) and Job Summary paragraph. That's substantive. Responsibilities: Key Responsibilities list. Requirements: Could include Required Experience, Required Technical Skills, Education. Possibly also Candidate Profile? But Candidate Profile is similar to required experience; but we already have Required Experience and Technical Skills. We'll put Candidate Profile under Requirements? Might duplicate. But we need to preserve all info; we can include Candidate Profile under Requirements as well, but that may duplicate info already present. However duplication is not prohibited; we just must not invent or summarize away detail. Duplicating is okay but maybe better to avoid duplication but still preserve info. Since Candidate Profile repeats similar info, we could include it but note it's similar. However to avoid duplication we could incorporate its content into Requirements (maybe as additional bullet). But we must not lose any detail; if we merge, we still preserve the info. So we can include Candidate Profile points under Requirements as additional bullets. Qualifications: The Qualifications and Competencies list. Skills: Preferred Skills list. Schedule: Work Environment details. Now we need to ensure we don't create sections with filler like "commensurate with experience". Not present. Now produce HTML. We'll start with

  About the role

  then

  containing the intro and job summary combined? Could be two paragraphs but we can combine into one

  with both sentences. But we must preserve all substantive information; merging is okay as long as we don't lose any info