3 Thales Hsm Jobs

PAN INDIA Bengaluru, Hyderabad, Pune, Chennai, Gurugram, Noida, Mumbai, Kolkata Job description * Role & Responsibilities: Provide 24x7 support for data security and encryption services in production systems. Manage Key Management Systems (KMS) and Tokenization platforms (Thales, Fortanix, Protegrity). Perform encryption key lifecycle operations generation, rotation, expiration, archival. Troubleshoot encryption/decryption failures, key access issues, and DB/storage integration problems. Onboard applications into Thales/Fortanix/Protegrity platforms. Work closely with Infra/Cloud/BAU teams to implement enterprise encryption strategies. Lead/participate in security audits, risk assessments, and compliance reporting . Document SOPs, runbooks, and mentor junior engineers. Preferred Candidate Profile: 812 years of IT experience, with minimum 5 years in Data Security / Encryption / Tokenization . Hands-on with Thales CipherTrust Manager, Vormetric, Fortanix DSM, Protegrity . Strong understanding of cryptographic standards AES, RSA, PKCS, KMIP. Exposure to Linux/Unix/Windows administration & shell scripting . Familiarity with AWS KMS, Azure Key Vault, Google Cloud KMS . Strong communication, leadership, and problem-solving skills.

Providing 24 x 7 supports for security in production systems as necessary to proactively protect the integrity, confidentiality, and availability of information of the company. Take End to End ownership of Technology incidents and Requests in order to resolve them within agreed objectives and to the satisfaction of customers. Ensure customer satisfaction through improved service and quality. All escalation timely responded and closed. To build relationship & network with stakeholders. Provide advanced technical support (Tier 2/3) for Thales CipherTrust, Fortanix SDKMS, Thales Vormetric, and Protegrity Data Security platforms in production environments. Manage and maintain enterprise Key Management Systems (KMS) and Tokenization Services. Perform encryption key lifecycle operations (Key generation, key rotation, key expiration, archival) ensuring compliance with security policies. Work closely with internal CaaS onboarding teams/BAU team/PSS infra teams/ Cloud teams to integrate and support data encryption strategies. Onboarding applications in Thales/Fortanix/Protegrity according to the business requirement in the Production environment to deliver the Encryption, Key management and Tokenization services across the bank. Troubleshooting issues related to key access, encryption/decryption failures, and integration with applications (e.g. Oracle, MSSQL DB, PGSQL DB, Elastic DB, vSAN/Netapp/PowerTech/Hitachi storages). Lead or participate in security audits, risk assessments, and compliance reporting. Document processes, standard operating procedures (SOPs), and maintain detailed support runbooks. Mentor junior engineers and provide training to internal teams on best practices for key management and tokenization. KEY STAKEHOLDERS: IT-TPS-ET IT-TPS-ICS PROTECT DirectMsgCont CTM - IT-TPS-ET CIS OTS Cyber Sec Svc Proj - GBS COMPETENCIES (KNOWLEDGE & SKILLS): Having bachelors degree in engineering, Computer Science / Information Technology or its equivalent. Must have 5+ years of knowledge in supporting enterprise encryption, tokenization, or key management solutions. 8-9 years of relevant experience in IT; out of which at least 5 years’ experience in Data Security and manage complex Projects & Cyber Operations. Good experience in Automating Manual task. Possess strong decision making, communication and interpersonal skills. Ability to work well autonomously and within a team environment & ability to work in weekends. Hands-on experience with Thales CipherTrust Manager, Thales Vormetric including DSM configuration, tokenization vault setup and Transparent Encryption Agent management. Proficiency with Fortanix DSM, including Rest API, TDE (Transparent Data Encryption), BYOK (Bring Your Own Key) & HYOK (Hold Your Own Key) scenarios. Experience with Protegrity for tokenization, data masking, and centralized data protection policy enforcement. Strong knowledge of cryptographic standards (AES, RSA, KMIP, PKCS) key lifecycle management. Comfortable with Linux/Unix/Windows operation system administration and shell scripting. Familiarity with cloud native KMS tools kike AWS KMS, Azure Key Vault, and Google Cloud KMS is a plus. Familiarity with TLS/SSL, PKI, and secure API communication is a plus. Excellent communication skills – oral, written and presentation; technical reporting writing across various types of target audiences.

As an experienced HSM (Hardware Security Module) Specialist with expertise in Thales HSM (SafeNet) and JISA HSM technologies, you will be responsible for managing, deploying, and maintaining HSM solutions. Your role will involve ensuring the secure management of cryptographic keys, data encryption, and compliance with industry standards and regulations. You will configure, deploy, and manage Thales HSM (SafeNet) and JISA HSM solutions, monitor their performance, troubleshoot issues, and ensure availability and reliability. Additionally, you will be in charge of managing HSM firmware updates, patches, and upgrades in a secure and timely manner. Key responsibilities include performing cryptographic key generation, storage, distribution, and archival using HSM solutions, implementing key rotation and backup strategies, and ensuring secure handling of keys in compliance with PKI and cryptographic standards. You will integrate HSMs with applications, databases, and cloud services, providing technical support for secure data encryption, tokenization, and digital signature processes. Compliance with security standards such as FIPS 140-2/3, PCI DSS, and ISO 27001 is essential, along with implementing policies and procedures for data protection and security. Maintaining detailed documentation of HSM configurations, processes, and operations, as well as providing training to internal teams on HSM usage, security policies, and best practices, are part of the role. Collaboration with cross-functional teams and vendors (Thales, JISA) for technical support and advanced configurations is also required. Required skills and qualifications include technical expertise in Thales HSM (SafeNet) and JISA HSM tools, cryptographic concepts, key management protocols, industry standards, integration skills, problem-solving abilities, and soft skills like communication and collaboration.,