Data Security Engineer (Encryption / Tokenization / HSM) Cloudxtreme

8.0 - 13.0 years

11 - 18 Lacs

kolkata, bengaluru, delhi / ncr

Hybrid

PAN INDIA Bengaluru, Hyderabad, Pune, Chennai, Gurugram, Noida, Mumbai, Kolkata Job description * Role & Responsibilities: Provide 24x7 support for data security and encryption services in production systems. Manage Key Management Systems (KMS) and Tokenization platforms (Thales, Fortanix, Protegrity). Perform encryption key lifecycle operations generation, rotation, expiration, archival. Troubleshoot encryption/decryption failures, key access issues, and DB/storage integration problems. Onboard applications into Thales/Fortanix/Protegrity platforms. Work closely with Infra/Cloud/BAU teams to implement enterprise encryption strategies. Lead/participate in security audits, risk assessments, and compliance reporting . Document SOPs, runbooks, and mentor junior engineers. Preferred Candidate Profile: 812 years of IT experience, with minimum 5 years in Data Security / Encryption / Tokenization . Hands-on with Thales CipherTrust Manager, Vormetric, Fortanix DSM, Protegrity . Strong understanding of cryptographic standards AES, RSA, PKCS, KMIP. Exposure to Linux/Unix/Windows administration & shell scripting . Familiarity with AWS KMS, Azure Key Vault, Google Cloud KMS . Strong communication, leadership, and problem-solving skills.

Posted 11 hours ago

Apply

Data Security Cloudxtreme

8.0 - 12.0 years

18 - 33 Lacs

pune, bengaluru, delhi / ncr

Hybrid

Providing 24 x 7 supports for security in production systems as necessary to proactively protect the integrity, confidentiality, and availability of information of the company. Take End to End ownership of Technology incidents and Requests in order to resolve them within agreed objectives and to the satisfaction of customers. Ensure customer satisfaction through improved service and quality. All escalation timely responded and closed. To build relationship & network with stakeholders. Provide advanced technical support (Tier 2/3) for Thales CipherTrust, Fortanix SDKMS, Thales Vormetric, and Protegrity Data Security platforms in production environments. Manage and maintain enterprise Key Management Systems (KMS) and Tokenization Services. Perform encryption key lifecycle operations (Key generation, key rotation, key expiration, archival) ensuring compliance with security policies. Work closely with internal CaaS onboarding teams/BAU team/PSS infra teams/ Cloud teams to integrate and support data encryption strategies. Onboarding applications in Thales/Fortanix/Protegrity according to the business requirement in the Production environment to deliver the Encryption, Key management and Tokenization services across the bank. Troubleshooting issues related to key access, encryption/decryption failures, and integration with applications (e.g. Oracle, MSSQL DB, PGSQL DB, Elastic DB, vSAN/Netapp/PowerTech/Hitachi storages). Lead or participate in security audits, risk assessments, and compliance reporting. Document processes, standard operating procedures (SOPs), and maintain detailed support runbooks. Mentor junior engineers and provide training to internal teams on best practices for key management and tokenization. KEY STAKEHOLDERS: IT-TPS-ET IT-TPS-ICS PROTECT DirectMsgCont CTM - IT-TPS-ET CIS OTS Cyber Sec Svc Proj - GBS COMPETENCIES (KNOWLEDGE & SKILLS): Having bachelors degree in engineering, Computer Science / Information Technology or its equivalent. Must have 5+ years of knowledge in supporting enterprise encryption, tokenization, or key management solutions. 8-9 years of relevant experience in IT; out of which at least 5 years’ experience in Data Security and manage complex Projects & Cyber Operations. Good experience in Automating Manual task. Possess strong decision making, communication and interpersonal skills. Ability to work well autonomously and within a team environment & ability to work in weekends. Hands-on experience with Thales CipherTrust Manager, Thales Vormetric including DSM configuration, tokenization vault setup and Transparent Encryption Agent management. Proficiency with Fortanix DSM, including Rest API, TDE (Transparent Data Encryption), BYOK (Bring Your Own Key) & HYOK (Hold Your Own Key) scenarios. Experience with Protegrity for tokenization, data masking, and centralized data protection policy enforcement. Strong knowledge of cryptographic standards (AES, RSA, KMIP, PKCS) key lifecycle management. Comfortable with Linux/Unix/Windows operation system administration and shell scripting. Familiarity with cloud native KMS tools kike AWS KMS, Azure Key Vault, and Google Cloud KMS is a plus. Familiarity with TLS/SSL, PKI, and secure API communication is a plus. Excellent communication skills – oral, written and presentation; technical reporting writing across various types of target audiences.

Posted 14 hours ago

Apply

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.