Key Injection Facility (KIF) Manager

Position Summary

Essintial Enterprise Solutions is seeking an experienced Key Injection Facility (KIF) Manager to oversee the daily operations, security, compliance, and production activities of our secure cryptographic key injection facility in Palmetto, FL. This leadership role is responsible for managing secure payment device injection operations while ensuring full compliance with PCI PIN Security, ANSI ASC X9 TR-39, and PCI P2PE requirements.

The KIF Manager will lead secure key ceremonies, manage operational throughput, maintain physical and logical security controls, oversee audits and compliance initiatives, and serve as the primary operational contact for customers, OEMs, and payment processing partners. This position requires a highly detail-oriented leader with deep expertise in payment security, cryptographic key management, and secure facility operations.

Essential Duties & Responsibilities

Operational Leadership

• Oversee daily key injection operations for payment terminals, PIN pads, mPOS devices, and unattended payment systems.
• Manage production schedules, workflow efficiency, staffing, and service-level performance.
• Lead secure key injection processes including DUKPT, master/session, and TR-31 key block methodologies.
• Conduct and supervise dual-control key ceremonies and split-knowledge key custodianship procedures.
• Drive continuous operational improvements focused on throughput, quality, and cost efficiency.

Security & Compliance

• Maintain responsibility for all physical and logical security controls within the secure facility environment.
• Ensure compliance with PCI PIN Security, ANSI ASC X9 TR-39, PCI P2PE, and related industry standards.
• Serve as primary contact during internal and external audits and assessments.
• Maintain all required documentation including policies, procedures, visitor logs, key inventories, incident reports, and chain-of-custody records.
• Manage remediation activities and corrective action plans related to audit findings.

Customer & Vendor Management

• Serve as a senior operational contact for customers, processors, acquirers, ISOs, ISVs, and OEM partners.
• Coordinate with terminal manufacturers regarding firmware management, key profiles, certifications, and remote key injection onboarding.
• Support customer audits, facility walkthroughs, and operational reviews.
• Manage third-party vendors supporting facility security and operational infrastructure.

Team Leadership

• Recruit, train, supervise, and develop injection technicians, key custodians, and operational staff.
• Maintain staffing levels appropriate for secure operations and compliance requirements.
• Promote a culture of accountability, security awareness, and operational excellence.

#EES25

Required Qualifications

• Bachelor’s degree in Information Security, Business, Operations, Technology, or related field preferred; equivalent experience considered.
• Minimum 10 years of experience in payments, cryptographic services, secure manufacturing, or related secure operations environments.
• Minimum 5 years of direct experience managing or supervising a PCI PIN or TR-39 certified key injection facility.
• Strong knowledge of PCI PIN Security Requirements, ANSI ASC X9 TR-39, PCI P2PE, and cryptographic key management practices.
• Experience with payment HSM platforms and key loading devices.
• Demonstrated experience leading secure key ceremonies and managing chain-of-custody controls.
• Strong leadership, communication, and organizational skills.
• Ability to successfully pass extensive background, credit, and employment verification screenings required for PCI-regulated environments.

Preferred Qualifications

• Experience working with major payment terminal OEMs including Verifone, Ingenico, PAX, Castles, ID Tech, and Equinox.
• Lean, Six Sigma, ISO 9001, or similar operational excellence certifications.
• Familiarity with PCI DSS, SOC 2, NIST SP 800-57, or FIPS 140-2/3 compliance frameworks.
• Experience launching or expanding secure injection operations or P2PE programs.
• Physical Requirements
• Ability to work on-site in a secure operational environment.
• Ability to sit, stand, and walk for extended periods throughout the workday.
• Ability to occasionally lift and move equipment or boxes up to 25 pounds.

Travel Requirements

• Up to 10% travel for audits, customer meetings, OEM coordination, and operational support activities.

Work Authorization & Screening Requirements

• Final candidates must successfully complete all PCI-required background investigations including criminal history, credit review, employment verification, education verification, and work authorization validation prior to employment.