Data Security

• Providing 24 x 7 supports for security in production systems as necessary to proactively protect the integrity, confidentiality, and availability of information of the company.

• Take End to End ownership of Technology incidents and Requests in order to resolve them within agreed objectives and to the satisfaction of customers.

• Ensure customer satisfaction through improved service and quality. All escalation timely responded and closed.

• To build relationship & network with stakeholders.

• Provide advanced technical support (Tier 2/3) for Thales CipherTrust, Fortanix SDKMS, Thales Vormetric, and Protegrity Data Security platforms in production environments.

• Manage and maintain enterprise Key Management Systems (KMS) and Tokenization Services.

• Perform encryption key lifecycle operations (Key generation, key rotation, key expiration, archival) ensuring compliance with security policies.

• Work closely with internal CaaS onboarding teams/BAU team/PSS infra teams/ Cloud teams to integrate and support data encryption strategies.

• Onboarding applications in Thales/Fortanix/Protegrity according to the business requirement in the Production environment to deliver the Encryption, Key management and Tokenization services across the bank.

• Troubleshooting issues related to key access, encryption/decryption failures, and integration with applications (e.g. Oracle, MSSQL DB, PGSQL DB, Elastic DB, vSAN/Netapp/PowerTech/Hitachi storages).

• Lead or participate in security audits, risk assessments, and compliance reporting.

• Document processes, standard operating procedures (SOPs), and maintain detailed support runbooks.

• Mentor junior engineers and provide training to internal teams on best practices for key management and tokenization.

KEY STAKEHOLDERS:

• IT-TPS-ET IT-TPS-ICS PROTECT  DirectMsgCont

• CTM - IT-TPS-ET CIS OTS

• Cyber Sec Svc Proj - GBS

COMPETENCIES (KNOWLEDGE & SKILLS):

• Having bachelors degree in engineering, Computer Science / Information Technology or its equivalent.

• Must have 5+ years of knowledge in supporting enterprise encryption, tokenization, or key management solutions.

• 8-9 years of relevant experience in IT; out of which at least 5 years’ experience in Data Security and manage complex Projects & Cyber Operations.

• Good experience in Automating Manual task.

• Possess strong decision making, communication and interpersonal skills.

• Ability to work well autonomously and within a team environment & ability to work in weekends.

• Hands-on experience with Thales CipherTrust Manager, Thales Vormetric including DSM configuration, tokenization vault setup and Transparent Encryption Agent management.

• Proficiency with Fortanix DSM, including Rest API, TDE (Transparent Data Encryption), BYOK (Bring Your Own Key) & HYOK (Hold Your Own Key) scenarios.

• Experience with Protegrity for tokenization, data masking, and centralized data protection policy enforcement.

• Strong knowledge of cryptographic standards (AES, RSA, KMIP, PKCS) key lifecycle management.

• Comfortable with Linux/Unix/Windows operation system administration and shell scripting.

• Familiarity with cloud native KMS tools kike AWS KMS, Azure Key Vault, and Google Cloud KMS is a plus.

• Familiarity with TLS/SSL, PKI, and secure API communication is a plus.

• Excellent communication skills – oral, written and presentation; technical reporting writing across various types of target audiences.