HSM Security Engineer

Description du poste:

Ingenico is the global leader in payments acceptance solutions. As the trusted technology partner for merchants, banks, acquirers, ISVs, payment aggregators and fintech customers our world-class terminals, solutions and services enable the global ecosystem of payments acceptance. With 40 years of experience, innovation is integral to Ingenico's approach and culture, inspiring our large and diverse community of experts who anticipate and help shape the evolution of commerce worldwide. At Ingenico, trust and sustainability are at the heart of everything we do.

Mission

As part of strengthening our cryptographic security capabilities (electronic signature, key management and injection), we are recruiting an HSM Expert.

You will act as a transverse technical lead across multiple Group platforms, working on critical environments in close collaboration with infrastructure, security, and project teams.

Your Responsibilities

1. HSM Management & Expertise

* Install, configure, and administer HSM solutions (Utimaco, Thales…)

* Manage the full lifecycle: deployment, maintenance, upgrades

* Secure environments (access control, roles, partitions)

* Support and train operational teams

* Contribute to monitoring (SNMP, syslog, SIEM integration)

2. Key Management & Cryptography

* Manage the full lifecycle of cryptographic keys (generation, rotation, revocation)

* Participate in key ceremonies

* Integrate HSMs into platforms (signature, key injection)

* Manage certificates and digital identities (X.509, PKCS#12…)

3. Automation & Integration

* Develop automation scripts (Bash, Python)

* Implement backup, restore, and security processes

* Integrate HSM into CI/CD environments

4. Security & Compliance

* Contribute to internal cryptographic policies

* Support security and compliance audits (PCI-DSS, PCI P2PE, PCI KMO…)

* Perform technology and security monitoring

5. Documentation & Collaboration

* Produce and maintain technical documentation

* Provide expert support to R&D, Ops, and Security teams

* Interact with vendors and technology partners

Profile

Must-have

* Proven experience with HSM solutions

* Strong knowledge of applied cryptography (PKI, RSA, ECC, AES…)

* Advanced Linux administration

* Fluent technical English

Key skills

* Protocols & standards: TLS, PKCS#11, DUKPT, TR-31 / TR-34

* Scripting (Bash / Python)

* Networking and security fundamentals

Nice to have

* Experience in payment or banking environments

* CI/CD or security integration experience

* Programming languages: Java, Kotlin, Go

* Knowledge of post-quantum cryptography

Soft Skills

* Strong attention to detail and security mindset

* Autonomous and accountable

* Analytical and problem-solving skills

* Collaborative and transversal mindset

* Ability to simplify and explain complex topics

Education & Experience

* Bachelor's or Master's degree in IT / Cybersecurity or equivalent

* Significant experience in HSM environments (minimum 3 years)

Why join us?

* Highly critical and secure technical environment

* Transverse role with strong impact

* Work on core payment security systems

* Collaborate with recognized experts

Hybrid position, open to Paris (La Défense) or Valence (France).

.
As part of our values, we embrace diversity and inclusion at Ingenico. We are an equal opportunity employer and do not discriminate on the basis of an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status or any other protected characteristic under applicable law, whether actual or perceived.

Ingenico welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

We want to adapt our processes and create a safe work environment that welcomes everyone.

To learn more about what it's like working inside Ingenico, follow us on LinkedIn