Senior HSM Infrastructure Specialist – Entrust nShield
Brussels-Capital
Digital - Infrastructure
Work experience: 5-7
Reference number: 91807

Join a team dedicated to innovative solutions within the information security sector. This role offers you the opportunity to work on the implementation of advanced security technologies in a dynamic environment.

As an ideal candidate, you are a certified Entrust nShield Specialist with a strong background in security infrastructure, eager to apply your expertise in enhancing our security framework.

  • You automate the creation of the Security World along with the corresponding Administrator Card Set and Operator Card Sets across different environments.
  • You document and develop a demo regarding PKCS 11 integration for reuse across various software utilized within the organization.
  • You establish an Active-Passive RFS "cluster" and reset existing Security Worlds as necessary.
  • You create a new FIPS 140-2 Level 3 compliant Security World with AES set as the preferred cipher suite.
  • You implement ECC alongside to optimize efficiency.
  • You ensure all operational processes maintain a 3/6 quorum and set up remote management connections.
  • You enforce passphrase complexity requirements for ACS and OCS, ensuring thorough logging of all operational steps.

What are we looking for?

  • You are an Entrust nShield Certified Specialist.
  • You have at least 5 years of hands-on experience working with Entrust nShield products.
  • You have proven experience configuring HSMs in PKI environments, including Security Worlds, ACS, and OCS.
  • You have hands-on experience with PKCS#11 integrations.
  • You have strong experience with Linux, specifically Red Hat Enterprise Linux 8 or higher.
  • You are comfortable designing and implementing automation for security infrastructure.
  • You are able to work fully on-site for the duration of the assignment.

Nice-to-Have

  • Experience integrating HSMs with platforms such as API Gateways, identity management systems, or secrets management tools (e.g. Vault).
  • Experience working in high-security or regulated environments.
  • Knowledge of Dutch and/or French.

What do we offer?

Location: Brussels

Work mode: On-site only (no remote work)

Start date: 12 January 2026

End date: 30 June 2026

Duration: 6 months

Contract: Freelance

Vacancies that may also interest you

Kenneth Van Cleynenbreugel
Business & Talent Consultant
We are a Great Place to Work
We evaluate our work environment with a survey and audit and have been allowed to call ourselves a Great Place to Work and Best Workplace for five years in a row now.
We are a Great Place to Work