Data Security Architect

Job Title: Data Security Architect Cryptographic Services

Exp: 5+ years

Location: Chennai,Hyderabad,Pune,Bangalore,Greater Noida

Shifts: should be comfortable for 24/7

Role Overview

cryptographic key management

Key Responsibilities

• Architecture & Design

• Define enterprise security architecture for cryptographic services including

  HSM

  ,

  CTM

  , and

  KMS

  .
• Develop high-level and low-level design documents for encryption and key lifecycle management.
• Ensure alignment with Zero Trust principles and regulatory frameworks (GDPR, PCI DSS, FIPS).

• Cryptographic Services

• Deploy and manage

  Hardware Security Modules (HSM)

  for secure key storage and cryptographic operations.
• Implement

  CipherTrust Manager (CTM)

  for centralized key orchestration and data-at-rest encryption.
• Configure

  Key Management Systems (KMS)

  for cloud-native and hybrid environments (AWS KMS, Azure Key Vault).
• Integrate BYOK (Bring Your Own Key) and KYOK (Keep Your Own Key) models for cloud security.

• Compliance & Governance

• Map architecture to compliance standards (ISO 27001, NIST 800-53).
• Conduct risk assessments and security audits for cryptographic systems.
• Maintain documentation for regulatory and internal audits.

• Operational Excellence

• Establish monitoring and alerting for cryptographic services.
• Provide Level 3 support for HSM, CTM, and KMS platforms.
• Drive automation for key rotation and lifecycle management using DevOps tools.

Required Skills & Experience

• 812 years in cybersecurity and cryptographic architecture.
• Hands-on experience with

  Thales HSM

  ,

  CipherTrust Manager

  , and

  cloud KMS solutions

  (AWS, Azure).
• Strong knowledge of PKI, encryption algorithms (AES, RSA), and secure key lifecycle.
• Proficiency in scripting (PowerShell, Bash) and automation frameworks.
• Certifications preferred:
• CISSP, CCSP
• Vendor-specific (Thales CipherTrust, AWS Security Specialty, Microsoft SC-100)

Desired Skills

• Experience with hybrid deployments and multi-region replication.
• Familiarity with container security and Kubernetes secrets management.
• Strong communication and stakeholder engagement skills.