HSM Architect – Winterthur Area

About the role

We are looking for an experienced HSM Architect to lead the design, implementation and governance of our enterprise Hardware Security Module and cryptographic infrastructure. The role combines technical leadership with compliance and operational excellence, serving as the senior escalation point for all HSM‑related challenges.

Key responsibilities

• Design, implement and govern enterprise HSM and cryptographic architectures, including key management, PKI integration and cryptographic controls.
• Define and maintain HSM lifecycle processes such as provisioning, rotation, backup, recovery and retirement.
• Ensure compliance with PCI‑DSS, eIDAS and other security governance frameworks.
• Lead complex security incidents, cryptographic investigations and major change activities.
• Develop disaster‑recovery, business‑continuity and backup/restore strategies for HSM platforms.
• Produce architecture standards, operational procedures and governance documentation.
• Collaborate with security, infrastructure, cloud, application and compliance teams to align end‑to‑end cryptographic security.

Required profile

• Extensive experience designing and supporting enterprise HSM and cryptographic environments.
• Strong expertise with Thales Luna Network HSMs, key management, PKI and certificate services.
• Deep understanding of cryptographic governance, security controls, compliance requirements and audit principles.

Required skills

• Thales Luna Network HSM administration
• Key management and PKI integration
• Cryptographic operations and controls
• HSM lifecycle management (provisioning, rotation, backup, retirement)
• Compliance frameworks: PCI‑DSS, eIDAS
• Disaster‑recovery and business‑continuity planning for security platforms