Senior HSM Infrastructure Specialist – Entrust nShield
Brussels-Capital
Digital - Infrastructure
Work experience: 5-7
Reference number: 91807
Join a team dedicated to innovative solutions within the information security sector. This role offers you the opportunity to work on the implementation of advanced security technologies in a dynamic environment.
As an ideal candidate, you are a certified Entrust nShield Specialist with a strong background in security infrastructure, eager to apply your expertise in enhancing our security framework.
- You automate the creation of the Security World along with the corresponding Administrator Card Set and Operator Card Sets across different environments.
- You document and develop a demo regarding PKCS 11 integration for reuse across various software utilized within the organization.
- You establish an Active-Passive RFS "cluster" and reset existing Security Worlds as necessary.
- You create a new FIPS 140-2 Level 3 compliant Security World with AES set as the preferred cipher suite.
- You implement ECC alongside to optimize efficiency.
- You ensure all operational processes maintain a 3/6 quorum and set up remote management connections.
- You enforce passphrase complexity requirements for ACS and OCS, ensuring thorough logging of all operational steps.
What are we looking for?
- You are an Entrust nShield Certified Specialist.
- You have at least 5 years of hands-on experience working with Entrust nShield products.
- You have proven experience configuring HSMs in PKI environments, including Security Worlds, ACS, and OCS.
- You have hands-on experience with PKCS#11 integrations.
- You have strong experience with Linux, specifically Red Hat Enterprise Linux 8 or higher.
- You are comfortable designing and implementing automation for security infrastructure.
- You are able to work fully on-site for the duration of the assignment.
Nice-to-Have
- Experience integrating HSMs with platforms such as API Gateways, identity management systems, or secrets management tools (e.g. Vault).
- Experience working in high-security or regulated environments.
- Knowledge of Dutch and/or French.
What do we offer?
Location: Brussels
Work mode: On-site only (no remote work)
Start date: 12 January 2026
End date: 30 June 2026
Duration: 6 months
Contract: Freelance
Vacancies that may also interest you
)
Kenneth Van Cleynenbreugel
Business & Talent Consultant
+32473822673
