W2/FullTime - Thales CipherTrust Manager and Thales Luna Network HSM

Senior Security Consultant – Thales CipherTrust Manager & Thales Luna Network HSM

Role Overview

Seeking an experienced security consultant with expertise in both Thales CipherTrust Manager and Thales Luna Network HSM technologies. The consultant will deploy, integrate, administer, troubleshoot, and optimize enterprise encryption, key management, and hardware security solutions across on-premises and cloud environments.

1. Thales CipherTrust Manager Experience

· Deploy, configure, administer, and upgrade Thales CipherTrust Manager.

· Implement and support CipherTrust Transparent Encryption (CTE).

· Configure and troubleshoot KMIP integrations.

· Deploy and manage CipherTrust Cloud Key Manager (CCKM).

· Implement CipherTrust Application Key Manager (CAKM).

· Configure tokenization and enterprise data protection capabilities.

· Perform migrations, HA deployments, backup/recovery, and health checks.

· Integrate CipherTrust Manager with enterprise applications, databases, storage platforms, virtualization, and cloud services.

· Develop documentation, runbooks, and provide troubleshooting and root-cause analysis.

2. Thales Luna Network HSM Experience

· Deploy, configure, administer, and maintain Thales Luna Network HSMs.

· Perform partition creation, HA configuration, backup/restore, firmware upgrades, client configuration, and health checks.

· Experience with Thales Data Protection on Demand (DPoD) cloud HSM services.

· Integrate Luna Network HSMs and DPoD with enterprise applications and platforms such as Microsoft PKI (AD CS), EJBCA, CyberArk, F5 BIG-IP, web servers, code signing, databases, and custom applications using PKCS#11, JCE, CNG/KSP, and other supported interfaces.

· Support HSM key lifecycle management, certificate services, PKI, TLS/SSL, and cryptographic operations.

· Troubleshoot HSM connectivity, performance, and application integration issues.

Common Technical Skills

· Knowledge of encryption, key lifecycle management, PKI, TLS/SSL, certificates, and cryptography.

· Experience with Linux and Windows.

· Knowledge of REST APIs and enterprise integrations.

· Excellent communication, documentation, troubleshooting, and customer engagement skills.