Security Engineer (HSM and Key Management)

About the role

RS2 is seeking a meticulous Security Engineer to focus on cryptographic key management and Hardware Security Module (HSM) administration. This junior‑to‑mid‑level position is ideal for an information security professional with solid fundamentals who wants to specialize in protecting critical cryptographic infrastructure.

Key responsibilities

• Assist in the full key lifecycle: generation, distribution, rotation, revocation, and secure destruction.
• Support daily operation, configuration, and maintenance of HSMs and enterprise Key Management Systems.
• Monitor HSM health, capacity, and audit logs, identifying anomalies before they affect production.
• Enforce strict access‑control policies and cryptographic best practices such as least privilege and separation of duties.
• Maintain up‑to‑date documentation of procedures, disaster‑recovery plans, and HSM configurations.
• Research emerging cryptographic threats and propose process optimisations or automation.

Required profile

• 1‑3+ years of experience in information security, IT infrastructure, or a related field.
• Strong understanding of core InfoSec principles and cryptography fundamentals.
• High sense of responsibility; zero tolerance for errors in key handling.
• Self‑starter who proactively addresses gaps in documentation or processes.
• Highly organized and process‑oriented work ethic.

Required skills

• Experience or exposure to HSMs (e.g., Thales, Entrust, Utimaco).
• Familiarity with enterprise Key Management Systems.
• Knowledge of symmetric encryption, asymmetric encryption, hashing, and PKI.
• Understanding of network security concepts.