HSM Architect (m/w/d) – Winterthur Area

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

We are seeking an experienced HSM Architect to provide technical leadership and architecture governance for Hardware Security Module (HSM) and cryptographic infrastructure services. The role is responsible for designing, securing, and governing enterprise cryptographic environments, ensuring compliance, resilience, and operational excellence. As a senior technical authority, you will translate cryptographic and regulatory requirements into secure, auditable, and supportable operational solutions.

##

Key Responsibilities:

• Design, implement, and govern enterprise HSM and cryptographic infrastructure architectures.
• Provide expertise in key management, PKI integration, cryptographic controls, and secure operational processes.
• Architect and maintain HSM lifecycle processes, including provisioning, rotation, backup, recovery, and retirement.
• Ensure compliance with regulatory and industry standards such as PCI-DSS, eIDAS, and security governance frameworks.
• Support and lead complex security incidents, cryptographic investigations, and major change activities.
• Define secure backup, restore, disaster recovery, and business continuity strategies for HSM platforms.
• Develop and maintain architecture standards, operational procedures, and governance documentation.
• Collaborate with security, infrastructure, cloud, application, and compliance teams to ensure end-to-end cryptographic security and operational alignment.
• Act as the senior escalation point for HSM and cryptographic infrastructure challenges.

##

Required Qualifications:

• Extensive experience designing and supporting enterprise HSM and cryptographic environments.
• Strong expertise in Thales Luna Network HSMs, key management, PKI, certificate services, and cryptographic operations.
• Deep understanding of cryptographic governance, security controls, compliance requirements, and auditing principles.
• Experience implementing highly secure, resilient, and operationally sustainable security architectures.
• Ability to translate business, security, and regulatory requirements into practical technical solutions.
• Strong analytical, communication, and stakeholder management skills.

##

Preferred Certifications: