We are seeking a Protegrity Engineer with strong (7+ years) hands-on experience implementing data protection solutions using Protegrity for tokenization and detokenization of sensitive data (PII/PCI). This role will focus on designing and integrating tokenization services into enterprise applications and data flows, configuring Protegrity components and policies, and ensuring secure, compliant handling of protected data across systems

What You ll Do

- Design and implement Protegrity-based tokenization/detokenization solutions for protecting sensitive data (PII, PCI, PHI as applicable).
- Integrate Protegrity tokenization services with applications, APIs, microservices, and batch processes across multiple environments (dev/test/prod).
- Configure and manage Protegrity components (policy/configuration, token vaults as applicable, key management integrations, service endpoints).
- Define and maintain tokenization policies, formats, and rules aligned with business requirements and compliance standards.
- Work with security, architecture, and application teams to implement data protection-by-design , including least privilege and separation of duties.
- Support key management, certificate management, and secure secrets handling (KMS/HSM integrations where applicable).
- Perform troubleshooting for tokenization flows: authentication/authorization issues, latency, service connectivity, configuration errors, and data mapping issues.
- Implement monitoring and operational support for Protegrity services, including logs, metrics, alerting, and runbooks.
- Ensure secure handling of de-tokenization access paths and enforce strong controls for who/what can de-tokenize and under which conditions.
- Support audits and compliance evidence collection (PCI DSS, GDPR, SOX, internal security controls), including documentation and operational procedures.





What We re Looking For

- 7+ years of strong hands-on experience with Protegrity implementation for tokenization and detokenization in enterprise environments.
- Solid understanding of data security principles: encryption vs tokenization, data classification, secure key management, and access controls.
- 6+ years of experience integrating tokenization into applications/services using APIs/SDKs and handling common data patterns (JSON payloads, database fields, .
- Understanding authentication and authorization patterns for sensitive services (mTLS, OAuth2/OIDC/JWT concepts or enterprise IAM equivalents).
- 7+ years of experience working with Linux/Unix environments, scripting, and operational troubleshooting.
- Ability to write and maintain technical documentation, runbooks, and integration guides.
- Strong debugging and problem-solving skills, especially in distributed systems and multi-workplace deployments.

Preferred Qualifications

- Experience exposing/consuming tokenization services through API Gateways such as AWS API Gateway or Apigee (routing, security, throttling, logging).
- Experience with cloud services and security tooling (AWS IAM, KMS, Secrets Manager, CloudWatch).
- Experience with CI/CD and automation (GitHub Actions/Jenkins) and IaC (Terraform/CloudFormation).
- Familiarity with compliance standards and audit practices (PCI DSS, GDPR, SOX) and producing evidence of artifacts.
- Experience with microservices, container platforms (Docker/Kubernetes), and service-to-service security.
- Knowledge of data masking, privacy engineering, and data governance processes.

Location Bangalore, India

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Protegrity Platform Engineer (Karnataka)
🏢 American Express Global Business Travel
📍 Karnataka