HSM Solution Security Expertise - M/F

Project overview

#StormYourCareer Join STORM GROUP and grow with us!

Secure cryptographic keys and manage the HSM & CipherTrust infrastructures of a banking giant

As part of major evolutions in the security technical foundation within the GTS/SEC (Global Technology Services / Security) department, we are looking for an HSM Solution Security Expert. Within the Development Factory / Secret & Certificates Services (SCS) unit, your role will be highly critical, specialized, and technical: you will ensure the implementation, development, automation, and operational maintenance (MCO) of cryptographic solutions (Thales HSM devices, Entrust CipherTrust encryption appliances) guaranteeing the protection of the group's sensitive data.

Your Future Environment

You will work within an expert infrastructure security team, using Agile / Scrum methodology. Based in Fontenay-sous-Bois (with occasional interventions in data centers in Île-de-France and Northern France in Seclin), you will be the technical referent for application teams, business projects, and IT production. This is the ideal setting to work with cutting-edge physical security hardware (HSM), automate the provisioning of cryptographic keys via Ansible/Python, and ensure the high availability of large-scale encryption services.

Your Key Missions

Implementation, Evolution & Automation (BUILD & DEV Mode):

Support, MCO & Business Assistance (RUN & SUPPORT Mode):

• Deploy, configure, and evolve physical and application security solutions: Thales HSM devices and Entrust CipherTrust on-the-fly encryption appliances.
• Develop and maintain automation and provisioning scripts for internal clients (Python, Ansible, AWX, Shell, GitHub).
• Manage projects for hardware/software obsolescence and support the implementation of new cryptographic architectures.
• Contribute to the design and development of tools for assisting and automating secret and certificate services (Secret & Certificates Services).
• Ensure the Operational Maintenance (MCO) of cryptographic infrastructures distributed across remote sites and data centers (IDF and Seclin).
• Provide expert-level production support for the entire SCS scope and manage complex incident resolution.
• Assist and advise application and business teams in integrating encryption, key management, and certificate services.
• Configure and operate monitoring, reporting, and compliance tracking tools (Splunk, Shinken, eHealth, Tufin, JIRA).

Requirements

Your Assets

Our Benefits

5 Reasons to Join Us

Our Selection Process

Ready to join a team of committed experts? Don't hesitate, join the Storm Team!

Storm Group encourages an inclusive and multicultural culture where diversity of profiles fuels our collective intelligence. By joining the Storm Team, you become part of a committed ecosystem that places the development of your talents at the heart of its strategy, while actively contributing to solidarity and reducing environmental impact, both within our offices and in the large-scale projects we undertake for our clients.

Work Environment

Storm Group is a consulting firm specializing in the transformation of Information Systems and Organizations. We support our clients across the entire IT value chain, from expert sourcing to strategic consulting and software engineering.

Our clientele primarily consists of major players in banking, insurance, and finance, for whom we mobilize rigorously selected consultants for their most strategic projects.

• Education: Engineering degree or Master's degree (Bac+5) in cybersecurity, cryptography, networks & IT systems.
• Experience: You have 5 to 8 years of confirmed experience in infrastructure security engineering, ideally gained in the banking, financial sector, or with an operator hosting critical infrastructures.
• Imperative Cryptography & Hardware Expertise:
• In-depth mastery of HSM (Hardware Security Module) physical security modules from Thales (nShield, Luna, etc.).
• Solid experience with Entrust CipherTrust encryption/emergency solutions and appliances (Data Discovery, on-the-fly encryption, Key Management).
• Perfect understanding of the cryptographic key lifecycle management, PKIs, and electronic certificates.
• System, Automation & Monitoring Skills:
• Mastery of Linux / RedHat system administration.
• Practice of scripting and development for automation: Python, Ansible, AWX, Shell, Git / GitHub.
• Knowledge of supervision and log analysis tools: Splunk, Shinken, eHealth, Tufin.
• Experience working in an Agile Scrum environment and ticket management with JIRA.
• Strong Sense of Rigor and Security: Surgical precision in handling cryptographic objects and applying physical and logical security procedures.
• Service Mindset and Pedagogy: Ability to support and advise non-specialist application teams on implementing cryptography.
• Autonomy and Versatility: Ability to switch between developing automation scripts, intervening in data centers, and resolving production incidents.
• 75% reimbursement of transport passes.
• Restaurant tickets subsidized by STORM GROUP at 50% (€10.5 / day).
• Access to Gymlib / Wellpass (sports and well-being).
• Health / Provident Fund plan with Alan.
• Continuous training: Access to Udemy Business and support for Thales/Entrust and cybersecurity certifications (CISSP, CEH).
• Referral bonus, profit-sharing, and participation bonuses.
• Two to three days of remote work per week (depending on intervention constraints in data centers).
• Tailored Career Path: Co-create a unique professional trajectory adapted to your ambitions.
• Strategic Missions: Work on large-scale projects, perfectly aligned with your expertise.
• Dedicated Support: Benefit from structured annual reviews to ensure your continuous progress.
• Continuous Excellence: Develop your skills daily within a demanding ecosystem.
• Sustainable Performance: Thrive in an environment where business demands respect your work-life balance.
• Introductory discussion with a recruiter.
• Technical interview with in-depth technical evaluation (Practical case for integrating/migrating Thales and CipherTrust HSMs, automation scripting in Python/Ansible for key provisioning, cryptographic incident management under Splunk/Linux).
• Final meeting to validate fit and project outlook for the mission.

Project details

• Start: ASAP
• Duration: 1 mois
• Remote: hybrid
• Location: 75002, Paris, Île-de-France, FR
• Languages: French