How to Apply to Thales Digital Identity & Security

9 min read Last updated April 20, 2026 2833 open positions
Blake Crosley
Blake Crosley Researched using publicly available information, hiring data, and ATS analysis.

Key Takeaways

  • All Thales reqs route through one Phenom site at careers.thalesgroup.com; filter by Business Line 'Digital Identity & Security' to find DIS roles specifically.
  • Site culture varies sharply: Meudon and La Ciotat are French-primary, Vantaa is Finnish-direct, Singapore is APAC-polished, Austin is US defense-industry. Tailor your resume and interview style to the site, not just the role.
  • Standards expertise (Common Criteria, FIPS 140, EMVCo, GlobalPlatform, ICAO 9303) is the dividing line between candidates who get callbacks and those who do not.
  • Five years post-acquisition, Gemalto product names (SafeNet, IDPrime, Cinterion, Cogent) are still in daily use internally. Use them on your resume.
  • Cleared roles in Austin, France, and the UK take 4 to 16 weeks longer to start; state clearance status upfront to accelerate the pipeline.
  • French offers come with Convention Collective Metallurgie position and coefficient that matter more than the headline salary because they govern career progression for years.
  • Hiring is cyclical with eSIM, post-quantum cryptography, and biometric passport renewal cycles; 2024 to 2026 is a strong hiring window across all three product lines.

About Thales Digital Identity & Security

Thales Digital Identity & Security (Thales DIS) is the global business line that emerged when Thales Group acquired Gemalto in April 2019 for approximately 4.65 billion euros. Headquartered in Meudon, just outside Paris, the unit absorbed Gemalto's Dutch-listed identity, smartcard, biometrics, and data-protection businesses and folded them into Thales's broader defense, aerospace, and digital portfolio. With roughly 28,000 employees across more than 40 countries, Thales DIS is the largest pure-play digital identity and data security organization in the world, and it sits at the technological intersection of payments, telecommunications, government identity, IoT, and cybersecurity. The product surface is unusually wide. Thales DIS manufactures and personalizes a meaningful share of the world's banking cards (estimated near half of global EMV smartcard volume), provides SIM cards and embedded SIM (eSIM) platforms to most major mobile network operators, supplies biometric passports, national ID cards, and driver's licenses to dozens of governments, and ships hardware security modules under the SafeNet brand that protect a substantial portion of global payment cryptography. The Gemalto IDPrime PKI smart card line, the Cogent biometric matching engines (acquired from 3M in 2017), the Cinterion IoT module business, and the SafeNet Trusted Access cloud IAM platform all live inside this division. Geographically, the center of gravity is European. Meudon hosts headquarters and product strategy, La Ciotat near Marseille runs deep R&D on chip cards and secure elements, Vantaa in Finland is the historical SIM and eSIM stronghold inherited from the Setec lineage, and the Belgian site in Tubize is a major personalization plant. Singapore anchors the APAC organization, Mexico City and Tlaxcala handle Americas card issuance, and Austin, Texas houses defense-grade cryptography work that requires US person status or active clearances. Smaller sites operate in Poland, Czech Republic, Brazil, India, and the UK. Culturally the unit still carries Gemalto DNA more than Thales Group's defense heritage at most non-classified sites. French is the working language at Meudon and La Ciotat, English dominates at Vantaa, Singapore, and Austin, and the company runs under the Convention Collective de la Metallurgie with strong CFDT, CGT, and FO union representation and an active Comite Social et Economique. Hiring is cyclical and follows government identity procurement cycles, telco capital expenditure waves, and in 2024 to 2026 the dual surge from eSIM adoption and post-quantum cryptography (PQC) product roadmaps.

Application Process

  1. 1
    Search and apply through careers

    Search and apply through careers.thalesgroup.com, which routes the entire Thales Group including the Digital Identity & Security business line through a single Phenom People career site (TGPTGWGLOBAL tenant). Filter by business line 'Digital Identity & Security' or by site city (Meudon, La Ciotat, Vantaa, Tubize, Singapore, Austin) to narrow to DIS roles.

  2. 2
    Create a candidate profile with email and password, upload a resume in PDF or Wo

    Create a candidate profile with email and password, upload a resume in PDF or Word, and let Phenom parse it into structured fields. Review the parsed output carefully because Phenom's parser commonly mis-categorizes French diplomas, Finnish degree titles, and security clearance levels. Fix everything before submitting.

  3. 3
    Expect a recruiter screen within 7 to 21 business days for active reqs

    Expect a recruiter screen within 7 to 21 business days for active reqs. French-site reqs almost always include a francophone recruiter call even for English-speaking roles. International reqs (Vantaa, Singapore, Austin) screen in English. Recruiters are typically internal Thales Talent Acquisition, not agency.

  4. 4
    Technical interviews follow in 1 to 3 rounds depending on level

    Technical interviews follow in 1 to 3 rounds depending on level. For embedded software, cryptography, secure element firmware, and HSM roles, expect a deep code or design discussion plus a domain-specific deep-dive (e.g. JavaCard, GlobalPlatform, EMV personalization, FIPS 140-3, Common Criteria EAL).

  5. 5
    Manager and cross-functional panels follow technical rounds

    Manager and cross-functional panels follow technical rounds. For French sites a face-to-face on-site visit is still common and often expected; international sites mix Teams and on-site. Expect to meet your would-be N+1 manager, a peer engineer, and frequently an HR business partner.

  6. 6
    Background checks and security screening are role-dependent

    Background checks and security screening are role-dependent. Defense-classified roles in Austin require active US security clearance or willingness to obtain one; French government identity work may require Habilitation Confidentiel Defense or Secret Defense; UK gov-ID work may require SC clearance. Expect 4 to 16 weeks for clearance processing.

  7. 7
    Offers from French sites follow Convention Collective Metallurgie grading (Coeff

    Offers from French sites follow Convention Collective Metallurgie grading (Coefficient and Position) which determines base salary bands, paid leave, and 13th month eligibility. Negotiate the Position level (cadre vs non-cadre) carefully because it gates long-term career progression more than the immediate salary number.

  8. 8
    Total time from application to start date typically runs 8 to 14 weeks for stand

    Total time from application to start date typically runs 8 to 14 weeks for standard reqs, and 16 to 30 weeks for cleared roles or international relocations. The 3-month French notice period for cadres on the candidate side often pushes start dates further than candidates expect.

Resume Tips for Thales Digital Identity & Security

recommended

Lead with concrete cryptography, secure element, or identity standards you have

Lead with concrete cryptography, secure element, or identity standards you have shipped against: Common Criteria EAL4+ or EAL5+, FIPS 140-2 or 140-3, GlobalPlatform, JavaCard, EMVCo, ICAO 9303 for travel documents, ISO/IEC 7816 for smart cards, ISO/IEC 14443 for contactless, and 3GPP TS 31.102 for SIM. Spelling these out signals you have actually worked the standards rather than just heard of them.

recommended

For Phenom's parser, use a clean single-column resume in PDF or DOCX, no tables

For Phenom's parser, use a clean single-column resume in PDF or DOCX, no tables or text boxes, standard section headings (Experience, Education, Skills, Certifications), and ISO date format YYYY-MM. The parser handles French diplomas reasonably well but mangles two-column or graphical resumes badly.

recommended

Translate Gemalto-era and SafeNet product names if you have them: SafeNet Luna H

Translate Gemalto-era and SafeNet product names if you have them: SafeNet Luna HSM, SafeNet ProtectServer, IDPrime, Sentinel LDK, Cinterion IoT modules, Cogent biometrics, MobileID, Trusted Access. Internal hiring managers still use these names every day even five years post-acquisition.

recommended

If applying to French sites, provide both French and English resumes and indicat

If applying to French sites, provide both French and English resumes and indicate language fluency on a CECRL scale (B2, C1, C2). Meudon and La Ciotat hiring managers will read the French version first; Vantaa, Singapore, and Austin read English only.

recommended

For defense-adjacent reqs (Austin Texas, some French gov-ID roles), explicitly s

For defense-adjacent reqs (Austin Texas, some French gov-ID roles), explicitly state citizenship, work authorization, and any active clearances with level and granting agency. Do not assume the recruiter will ask. Cleared candidates jump to the top of the queue for cleared reqs.

recommended

Quantify in units the hiring manager understands: cards personalized per hour, S

Quantify in units the hiring manager understands: cards personalized per hour, SIMs provisioned per month, transactions per second through an HSM, cryptographic operations per second, lines of secure firmware shipped into production silicon, number of MNOs onboarded to a remote SIM provisioning platform.

recommended

List all relevant certifications: CISSP, CISM, CCSP, CEH, GIAC GSEC or GPEN, PCI

List all relevant certifications: CISSP, CISM, CCSP, CEH, GIAC GSEC or GPEN, PCI-DSS QSA or ISA, ISO 27001 Lead Auditor, and vendor-specific credentials like Thales SafeNet specialist, Microsoft Azure Security, AWS Security Specialty. For embedded roles list ARM TrustZone, RISC-V, and any silicon vendor toolchain experience.

recommended

Mention familiarity with Thales-relevant agile and quality frameworks: SAFe, Scr

Mention familiarity with Thales-relevant agile and quality frameworks: SAFe, Scrum, ASPICE for automotive secure connectivity, DO-178C for aerospace adjacent work, and ITIL for managed services. Thales Group runs heavy SAFe at scale and ASPICE compliance is increasingly required.

ATS System: Phenom

Thales Group operates a single global Phenom People career experience site at careers.thalesgroup.com under the TGPTGWGLOBAL tenant. The Digital Identity & Security business line does not have a separate portal; all DIS reqs surface through the same Phenom front end with a 'Digital Identity & Security' business line filter. Phenom's widgets API endpoint at /widgets serves the search and detail pages, and the system feeds applications into Thales's downstream HRIS for processing.

  • Use the 'Business Line' facet to filter to Digital Identity & Security, then layer on country and city filters. Without the BL filter you will be drowning in defense, aerospace, and ground transportation reqs.
  • Phenom's parser reads single-column PDF and DOCX cleanly. Avoid InDesign exports, two-column layouts, and graphical CV templates because they shred parsing accuracy and you will spend the manual review fixing every field by hand.
  • Set up job alerts after creating a candidate profile. Phenom emails reasonably reliably and DIS reqs (especially in Vantaa and La Ciotat) often close within 14 to 21 days of posting because internal mobility candidates are surfaced first.
  • Phenom's 'Match Insights' or fit score is computed from your profile against the job description. Mirror the JD's keywords (cryptography, eSIM, JavaCard, biometric, PKI, FIDO2, post-quantum) verbatim in your skills list and experience bullets.
  • Apply once per req. Phenom de-duplicates submissions and submitting twice (or via two locale URLs) flags your profile for recruiter review and slows things down rather than speeding them up.
  • Returning candidates: log in with your existing profile rather than creating a new one. Thales recruiters can see your prior applications and a clean continuity history matters more than candidates think.

Interview Culture

Interviews at Thales DIS are technically rigorous but conversational rather than adversarial, and the cultural register varies sharply by site.

At Meudon and La Ciotat expect a French formal style: vouvoiement, structured agendas, technical questions delivered politely but pressed hard until you demonstrate depth. Hiring managers prize candidates who can explain a complex cryptographic protocol or a personalization process clearly to a non-specialist colleague, because Thales DIS sells to bank security officers, telco CTOs, and government procurement officers who expect that clarity. At Vantaa the Finnish style is direct, low on small talk, and oriented around demonstrated competence; do not mistake brevity for disinterest. Singapore interviews mix British and Asian conventions and tend to be the most polished and warm. Austin is American defense-industry style: clearance status will come up early, technical depth on cryptography and secure systems matters, and the panel will want to see you can hold up under formal program reviews. Across all sites expect at least one question about how you handle the dual constraints of security correctness and shipping deadlines, because every DIS product faces both. Salary discussions are direct in Finland and the US, more elliptical in France where Convention Collective Metallurgie position and coefficient frame the conversation more than absolute numbers.

What Thales Digital Identity & Security Looks For

  • Demonstrable depth in at least one of: applied cryptography, secure element firmware, HSM engineering, biometric matching, identity protocols (FIDO2, WebAuthn, OIDC, SAML), embedded systems on constrained hardware, or large-scale card or SIM personalization operations.
  • Standards literacy. Thales DIS lives or dies by Common Criteria, FIPS 140, EMVCo, GlobalPlatform, ICAO 9303, ISO/IEC 7816 and 14443, ETSI SCP, and 3GPP. Hiring managers want candidates who have read the specs, not just used libraries that implement them.
  • Quality and traceability mindset. Defense and government identity programs require auditable engineering: requirements traceability, formal verification awareness, configuration management, and willingness to work inside ASPICE, DO-178C, or Common Criteria evaluation processes.
  • Multilingual collaboration. Even non-French sites collaborate daily with Meudon and La Ciotat. Functional English is mandatory; French, German, Mandarin, or Spanish is a strong differentiator depending on customer geography.
  • Customer awareness. DIS engineers regularly support pre-sales and on-site customer integrations with banks, telcos, and government agencies. Candidates who can describe a customer-facing engineering moment clearly stand out from pure-research backgrounds.
  • Long-cycle product thinking. Smartcards, SIMs, and government IDs ship on multi-year roadmaps with field lifetimes measured in years or decades. Thales DIS prefers candidates who understand and accept that pace rather than expecting consumer-app weekly releases.
  • Security clearance eligibility for defense-adjacent roles. US person status for Austin, French nationality or EU equivalent for Habilitation Defense roles, UK eligibility for SC clearance roles. Stating eligibility upfront accelerates the pipeline.
  • Cultural fit with the Convention Collective Metallurgie framework at French sites: comfort with cadre status, 35-hour week with RTT days, work-council participation, and the union-represented industrial relations style that comes with a 28,000-person former Gemalto plus Thales engineering culture.

Frequently Asked Questions

Is Thales Digital Identity & Security the same company as Gemalto?
Thales DIS is the business line created when Thales Group acquired Gemalto in April 2019 for 4.65 billion euros. Gemalto itself was formed from the 2006 merger of Axalto (the Schlumberger smartcard spinoff) and Gemplus. Internally, the unit still carries Gemalto culture and product names heavily, so familiarity with both branding eras helps.
What ATS does Thales use and is the DIS site separate?
Thales runs a single Phenom People career site at careers.thalesgroup.com (TGPTGWGLOBAL tenant) for the entire group, including Digital Identity & Security. There is no separate DIS portal. Use the Business Line filter to surface DIS reqs.
Do I need to speak French to work at Meudon or La Ciotat?
Most permanent technical roles at Meudon and La Ciotat expect functional French (B2 or higher) for daily work, even if the formal req is posted in English. Some specialist research and customer-facing roles operate in English only, but they are the exception. Vantaa, Singapore, and Austin operate in English.
What security clearance do I need for Thales DIS roles?
It depends on the site and product line. Austin, Texas defense cryptography requires active or eligible US security clearance. French government identity and some HSM roles may require Habilitation Confidentiel Defense or Secret Defense, which requires French nationality. UK gov-ID roles may require SC clearance. Most commercial banking, telco, and IoT roles do not require clearance.
How long does the hiring process typically take?
Standard commercial reqs run 8 to 14 weeks from application to offer. Cleared reqs add 4 to 16 weeks for security processing. International relocations to France add another 4 to 8 weeks for visa and relocation logistics. Cadre-status candidates in France often serve 3 months notice on the candidate side, pushing start dates further out.
What is the Convention Collective de la Metallurgie and why does it matter?
Convention Collective Metallurgie is the French metallurgical industries collective bargaining agreement that governs Thales DIS employment terms in France. It defines salary grids, paid leave, RTT days, 13th month bonus eligibility, and career progression via Position and Coefficient grades. The Position level (especially cadre vs non-cadre) gates long-term career progression and is worth negotiating carefully.
Are Thales DIS engineers unionized?
French sites have strong union representation through CFDT, CGT, and FO, with an active Comite Social et Economique (CSE). Engineers are not required to join a union but the works council and union representation shape working conditions, restructuring discussions, and benefits negotiations meaningfully. International sites operate under local labor law without French-style works councils.
Can I move between Thales DIS and other Thales business lines (defense, aerospace, transport)?
Yes. Thales Group runs an active internal mobility program and posts internal reqs across business lines on the same Phenom site. Engineers commonly rotate between DIS, defense and security, aerospace, and ground transportation, especially in cybersecurity, embedded software, and AI roles. Internal mobility is generally encouraged after 18 to 24 months in role.
What is the hiring outlook in 2026 for Thales DIS?
Hiring is in a strong cyclical window driven by three concurrent surges: eSIM adoption growth across telcos, post-quantum cryptography (PQC) product roadmaps requiring new HSM and SDK engineering, and the biometric passport and ID renewal cycle in many countries that issued first-generation eDocuments around 2010 to 2016. Vantaa, La Ciotat, and Austin are particularly active.
Do Thales DIS engineers work on consumer products or only B2B and B2G?
Thales DIS sells almost exclusively B2B (banks, telcos, IoT OEMs) and B2G (governments). End consumers carry Thales DIS products in their wallets (chip cards), phones (SIMs, eSIMs, secure elements), and travel documents (biometric passports), but the customer is always the issuing institution. Engineers comfortable with multi-year B2B and B2G product cycles tend to thrive; engineers expecting consumer-app pace often struggle.

Open Positions

Thales Digital Identity & Security currently has 2833 open positions.

Check Your Resume Before Applying → View 2833 open positions at Thales Digital Identity & Security

Related Resources

Similar Companies

Sources

  1. Thales Group Careers Portal (Phenom) —
  2. Thales Digital Identity & Security Market Page —
  3. Thales Completes Acquisition of Gemalto (Press Release, April 2019) —
  4. Thales SafeNet Hardware Security Modules Product Page —
  5. Convention Collective Nationale de la Metallurgie (Legifrance) —
  6. Phenom People Career Site Platform Overview —
  7. Common Criteria Recognition Arrangement (Certified Products) —
  8. ICAO Doc 9303 Machine Readable Travel Documents —
  9. Thales 2024 Universal Registration Document (Annual Report) —