HSM Security Engineer

Ingenico

unknownPosted Jun 29, 2026
Posting intelligenceActively listedReposted 5×, possible evergreen/ghost posting

Skills

kotlinpythoncicdjavago

About the role

Date: Jun 29, 2026

Company:Location:

Suresnes, FR, 92150 Alixan, FR, 26300

#job-location.job-location-inline { display: inline; }

Ingenico is the global leader in payments acceptance solutions. As the trusted technology partner for merchants, banks, acquirers, ISVs, payment aggregators and fintech customers our world-class terminals, solutions and services enable the global ecosystem of payments acceptance. With 40 years of experience, innovation is integral to Ingenico’s approach and culture, inspiring our large and diverse community of experts who anticipate and help shape the evolution of commerce worldwide. At Ingenico, trust and sustainability are at the heart of everything we do.

Mission

As part of strengthening our cryptographic security capabilities (electronic signature, key management and injection), we are recruiting an HSM Expert.

You will act as a transverse technical lead across multiple Group platforms, working on critical environments in close collaboration with infrastructure, security, and project teams.

Your Responsibilities

1. HSM Management & Expertise

Install, configure, and administer HSM solutions (Utimaco, Thales…)

Manage the full lifecycle: deployment, maintenance, upgrades

Secure environments (access control, roles, partitions)

Support and train operational teams

Contribute to monitoring (SNMP, syslog, SIEM integration)

2. Key Management & Cryptography

Manage the full lifecycle of cryptographic keys (generation, rotation, revocation)

Participate in key ceremonies

Integrate HSMs into platforms (signature, key injection)

Manage certificates and digital identities (X.509, PKCS#12…)

3. Automation & Integration

Develop automation scripts (Bash, Python)

Implement backup, restore, and security processes

Integrate HSM into CI/CD environments

4. Security & Compliance

Contribute to internal cryptographic policies

Support security and compliance audits (PCI-DSS, PCI P2PE, PCI KMO…)

Perform technology and security monitoring

5. Documentation & Collaboration

Produce and maintain technical documentation

Provide expert support to R&D, Ops, and Security teams

Interact with vendors and technology partners

Profile

Must-have

Proven experience with HSM solutions

Strong knowledge of applied cryptography (PKI, RSA, ECC, AES…)

Advanced Linux administration

Fluent technical English

Key skills

Protocols & standards: TLS, PKCS#11, DUKPT, TR-31 / TR-34

Scripting (Bash / Python)

Networking and security fundamentals

Nice to have

Experience in payment or banking environments

CI/CD or security integration experience

Programming languages: Java, Kotlin, Go

Knowledge of post-quantum cryptography

Soft Skills

Strong attention to detail and security mindset

Autonomous and accountable

Analytical and problem-solving skills

Collaborative and transversal mindset

Ability to simplify and explain complex topics

Education & Experience

Bachelor’s or Master’s degree in IT / Cybersecurity or equivalent

Significant experience in HSM environments (minimum 3 years)

Why join us?

Highly critical and secure technical environment

Transverse role with strong impact

Work on core payment security systems

Collaborate with recognized experts

Hybrid position, open to Paris (La Défense) or Valence (France).

.

Ingenico welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

We want to adapt our processes and create a safe work environment that welcomes everyone.

To learn more about what it's like working inside Ingenico, follow us on LinkedIn

Questions about this role

Click "Apply with AI Applyd" above. We auto-fill the application from your resume and answer screening questions in seconds. No copy and paste, no juggling tabs.

Compensation varies by seniority, employer size, and location. When this listing publishes a salary band you'll see it in the badge row above the description.

Most applications complete in under 90 seconds. You can track the status in your dashboard and watch the screenshot proof land the moment the application submits.

AI Applyd supports Greenhouse, Lever, Ashby, Workday, iCIMS, SmartRecruiters, Personio, Teamtailor and other major ATS platforms. If we can submit through the platform, we do.

Want AI Applyd to auto-apply to roles like this?

We tailor your resume per posting, fill the forms, and track replies for you.