L3 HSM Architect (m/w/d) – Winterthur Area

We are seeking an experienced L3 HSM Architect to provide technical leadership and architecture governance for Hardware Security Module (HSM) and cryptographic infrastructure services. The role is responsible for designing, securing, and governing enterprise cryptographic environments, ensuring compliance, resilience, and operational excellence. As a senior technical authority, you will translate cryptographic and regulatory requirements into secure, auditable, and supportable operational solutions.

Key Responsibilities:

• Design, implement, and govern enterprise HSM and cryptographic infrastructure architectures.
• Provide expertise in key management, PKI integration, cryptographic controls, and secure operational processes.
• Architect and maintain HSM lifecycle processes, including provisioning, rotation, backup, recovery, and retirement.
• Ensure compliance with regulatory and industry standards such as PCI-DSS, eIDAS, and security governance frameworks.
• Support and lead complex security incidents, cryptographic investigations, and major change activities.
• Define secure backup, restore, disaster recovery, and business continuity strategies for HSM platforms.
• Develop and maintain architecture standards, operational procedures, and governance documentation.
• Collaborate with security, infrastructure, cloud, application, and compliance teams to ensure end-to-end cryptographic security and operational alignment.
• Act as the senior escalation point for HSM and cryptographic infrastructure challenges.

Required Qualifications:

• Extensive experience designing and supporting enterprise HSM and cryptographic environments.
• Strong expertise in Thales Luna Network HSMs, key management, PKI, certificate services, and cryptographic operations.
• Deep understanding of cryptographic governance, security controls, compliance requirements, and auditing principles.
• Experience implementing highly secure, resilient, and operationally sustainable security architectures.
• Ability to translate business, security, and regulatory requirements into practical technical solutions.
• Strong analytical, communication, and stakeholder management skills.

Preferred Certifications:

• Thales Luna HSM Administration Certification or equivalent vendor HSM credential
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• Additional Security, Network, Storage, or Compute infrastructure certifications are advantageous

Language Requirement:

• German language proficiency at minimum B2 level is mandatory.
• The role requires the ability to participate in technical discussions, incident coordination, service reviews, change management activities, and day-to-day communication with German-speaking stakeholders, customer teams, operational contacts, and site personnel.

Citizenship Requirement:

• Applicants must hold Swiss citizenship.

Location:

• Winterthur area, Switzerland
• Candidates should be based in, or regularly available within the Winterthur region to support local operational alignment, customer interaction, coordination with onsite and remote-hands teams, and participation in governance, escalation, architecture, and service review meetings as required.