HSM Architect – Winterthur Area

About the role

NTT DATA is looking for an experienced HSM Architect to lead the design, security and governance of enterprise‑wide Hardware Security Module (HSM) and cryptographic infrastructure. You will act as the senior technical authority, translating regulatory and business requirements into auditable, resilient solutions.

Key responsibilities

• Design, implement and govern enterprise HSM and cryptographic architectures, including key management, PKI integration and certificate services.
• Manage the full HSM lifecycle – provisioning, rotation, backup, recovery, retirement and disaster‑recovery planning.
• Ensure compliance with PCI‑DSS, eIDAS and other security frameworks, and produce governance documentation.
• Lead complex security incidents, cryptographic investigations and major change activities.
• Collaborate with security, infrastructure, cloud, application and compliance teams to align end‑to‑end cryptographic security.

Required profile

• Extensive experience designing and supporting enterprise HSM and cryptographic environments.
• Strong expertise with Thales Luna Network HSMs, key management, PKI and certificate services.
• Deep understanding of cryptographic governance, security controls, compliance and audit requirements.
• Ability to translate business, security and regulatory needs into practical technical solutions.
• Excellent analytical, communication and stakeholder‑management skills.

Required skills

• Thales Luna Network HSM
• Key management and rotation processes
• PKI integration and certificate services
• Cryptographic operations and governance
• HSM lifecycle management (provisioning, backup, recovery)
• Disaster recovery and business continuity planning
• Compliance frameworks (PCI‑DSS, eIDAS)