Job Description: Thales KMS Operations We are seeking a skilled professional to manage and operate Thales KMS infrastructure. The ideal candidate will be responsible for the secure generation, storage, and lifecycle management of encryption keys to support our organization's data security objectives. This role requires expertise in KMS operations, cryptographic protocols, and compliance with industry standards and regulations. Key Responsibilities: 1. Perform encryption key generation, rotation, distribution, revocation, and archival using Thales KMS solutions. 2. Monitor and maintain the performance and availability of the KMS infrastructure. 3. Ensure compliance with key usage policies and retention guidelines. 4. Install, configure, and upgrade Thales KMS hardware and software. 5. Manage integration with enterprise systems such as databases, applications, and cloud platforms. 6. Conduct regular system health checks and apply patches or updates as needed. 7. Monitor KMS logs and alerts for unauthorized access or anomalies. 8. Respond to and resolve security incidents related to key management operations. 9. Ensure audit readiness by maintaining detailed logs of key lifecycle events. 10. Implement and enforce key management policies and procedures in line with industry standards (e.g., PCI DSS, GDPR, HIPAA). 11. Support internal and external audits by providing necessary documentation and evidence. 12. Collaborate with the compliance team to address regulatory requirements. 13. Work closely with security, IT, and DevOps teams to integrate KMS capabilities into applications and workflows. 14. Provide training and support to stakeholders on KMS usage and best practices. 15. Troubleshoot and resolve issues related to KMS operations and integrations. 16. Maintain comprehensive documentation for KMS configurations, key policies, and operational procedures. 17. Generate periodic reports on key usage, compliance, and operational performance. Qualifications: Bachelors degree in computer science, Information Security, or a related field. Minimum 3 years of experience in key management or cryptographic operations. Hands-on experience with Thales KMS (e.g., Vormetric Data Security Manager, CipherTrust Manager). Familiarity with cloud KMS solutions such as AWS KMS, Azure Key Vault, or Google Cloud KMS is a plus. Strong knowledge of cryptographic algorithms (AES, RSA, ECC) and key lifecycle management. Proficiency in integrating KMS with databases, applications, and cloud platforms. Vendor certifications for Thales solutions (if available).
