Role Description Role Overview The Data Vault KMS Specialist will be responsible for the design implementation integration and operations of secure Data Vault and cryptographic key management services The role focuses on ensuring that sensitive identity data such as Aadhaar number PAN and eKYC artifacts are securely tokenized encrypted stored and accessed in compliance with regulatory and policies The candidate will work closely with architecture application and infrastructure teams to enable privacybydesign secure storage and controlled retrieval mechanisms using HSMbacked KMS systems Key Responsibilities 1 Data Vault Implementation Design and implement vaultbased tokenization and detokenization mechanisms for sensitive identifiers Ensure that plain data is never exposed outside vault boundary and only reference tokens are used by consuming applications Develop and maintain secure APIbased access mechanisms for vault services Implement bulk tokenization migration and onboarding processes securely 2 Cryptographic Key Management KMS HSM Design and manage cryptographic key lifecycle generation rotation storage archival destruction using KMSHSM solutions Implement and integrate HSMbacked encryption for data AES256 RSAECC as applicable Ensure that encryptiondecryption keys never leave HSM boundary Define and implement crypto policies aligned with security architecture and compliance requirements 3 Security Architecture Data Protection Ensure endtoend encryption data in transit at rest and in use for vault data Enforce tokenization masking and privacybydesign principles for sensitive identity data Implement finegrained access control least privilege and segregation of duties Design secure vault deployment zones isolated from untrusted networks 4 Access Control API Security Implement authentication and authorization controls for vault APIs JWT service identity etc Ensure detokenization is strictly controlled and allowed only for authorized business flows Secure APIs using request validation nonce handling and secure headers 5 Monitoring Logging Compliance Implement auditable logging and monitoring for all vault operations Track and on unauthorized access attempts and anomalous usage patterns Ensure compliance with oSecurity architecture oSecurity guidelines oISO 27001 NCRF CERTIn requirements 6 Operations Performance Ensure high availability scalability and low latency for vault operations Support realtime transaction performance requirements for application workflows Manage incident response for key compromise or vault breaches 7 Collaboration Governance Work with oSecurity Architecture team oApplication development teams oInfrastructure and cloud teams Support security audits VAPT and compliance assessments Maintain documentation SOPs and operational playbooks Required Technical Skills Core Security Vault Skills Experience in Data Vault Tokenization solutions Strong understanding of oTokenization detokenization oData masking pseudonymization oSecure data lifecycle management Cryptography KMS Handson experience with oKMS HSM solutions CryptoBind Thales AWS KMS Azure Key Vault etc Knowledge of oAES256 RSA ECC oKey wrapping key rotation key hierarchy Understanding of secure key storage and lifecycle management API Security Engineering Strong experience in oSecure API design REST oAuthentication mechanisms JWT OAuth2 mTLS Knowledge of oAPI security OWASP API Top 10 oInput validation and secure payload handling Infrastructure DevSecOps Exposure to oSecure deployments segmented zones microservices oLogging SIEM integration oCICD security practices Functional Domain Skills Understanding of oAadhaar ecosystem and UIDAI standards oeKYC processing and identity systems Experience Requirements 57 years in oApplication security cryptography KMS oData protection vault implementation Experience in government or regulated environments is highly desirable Preferred Certifications Vendor certifications HSMKMS specific preferred Key Competencies Robust security architecture mindset Ability to design scalable and compliant solutions Excellent problemsolving and analytical skills Strong documentation and stakeholder communication NicetoHave Handson experience in oTokenization platforms oHardware Security Modules HSMs

📌 Senior Data Engineer (Noida)
🏢 LTM
📍 Noida