Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Architecture Design
Good to have skills : NA
Minimum 7.5 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary: Experienced professional with 3–5 years of expertise in Public Key Infrastructure (PKI) and Hardware Security Module (HSM) technologies at both architectural and engineering levels. Proven ability to manage full PKI lifecycle, key management platforms, and integrate secure identity practices into enterprise and cloud environments. Roles and Responsibilities: Manage end-to-end PKI lifecycle management, including CA hierarchy design, policy enforcement, and certificate automation. Oversee key lifecycle operations using platforms like Thales CipherTrust, including secure key generation, rotation, and storage. Integrate PKI and HSM with enterprise applications for use cases such as TLS/SSL, code signing, and S/MIME. Collaborate with DevOps and security teams to embed identity protection into CI/CD pipelines and cloud-native environments. Technical Experience & Professional Attributes: Strong hands-on experience with: DigiCert CertCentral (API integration, automation) Thales Luna HSM, Entrust nCipher HSM CipherTrust Manager for key lifecycle and policy management Expertise in symmetric and asymmetric key management best practices. Proficient in automating certificate and key operations using PowerShell. Well-versed in implementing and enforcing modern authentication protocols (OAuth2, OIDC, SAML, MFA). Ensure compliance with industry standards such as X.509, TLS/SSL, and NIST. Education Qualifications: 15 years of education mandatory Additional Information: Experienced in certificate lifecycle automation and renewal strategies. Collaborative approach to cross-functional teamwork in security and DevOps domains. • Preferred primary work location: Bangalore