DUTIES AND RESPONSIBILITIES | About the role

Professional or technical pre-sales, engineering, or technical management role focusing on the Thales Data Security Portfolio, the duties and responsibilities center around architectural design, deployment lifecycle management, compliance enforcement, and technical validation.

The primary responsibilities are broken down by key Thales core platforms below:

As the Technical Consultant, you will:

Core Hardware Security Modules (HSM) Management

- Deployment Provisioning: Architecting, initializing, and configuring Thales Luna Network HSMs (such as the Luna T-Series) and payShield 10K payment processing HSMs to establish a secure hardware Root of Trust.
- Role Administration: Defining and enforcing strict multi-person segregation of duties (M of N quorum schemas). Overseeing the initialization of appliance-level and partition-level administrative boundaries, including HSM Security Officer (SO) and Partition Security Officer (PO) environments.
- Lifecycle Maintenance: Managing firmware upgrade paths, evaluating risk mitigation strategies for firmware rollbacks, and establishing backup-and-restore topologies ensuring cloning domains match across network and backup HSM nodes.
- Application Integration: Developing or validating client-side integration via standard APIs like PKCS#11, Microsoft CNG, and Java (JCA/JCE) using tools like LunaCM and the Crypto Command Center (CCC) for centralized graphical provisioning.

2. Enterprise Key Management Data Protection

- Centralized Key Orchestration: Designing and maintaining enterprise key storage fabrics leveraging the CipherTrust Data Security Platform (CDSP) and CipherTrust Manager.
- Lifecycle Orchestration: Automating the creation, storage, rotation, auditing, and destruction of encryption keys across heterogeneous systems, local datacenters, and multi-cloud infrastructure (BYOK/HYOK).
- Granular Access Control:



Setting and monitoring cryptographic access policies, verifying that administrative workloads are strictly separated from raw data access parameters.
- Data-at-Rest Protection: Implementing CipherTrust connectors (Transparent Encryption, Application Data Protection, Tokenization) to guard sensitive databases, file systems, and storage arrays.

3. Compliance, Regulatory Alignment Security Architecture

- Regulatory Framework Mapping: Consulting on data sovereignty and privacy requirements such as Indias Digital Personal Data Protection (DPDP) Act 2023, GDPR, HIPAA, and PCI-DSS and matching them directly to Thales tokenization, masking, and HSM logging configurations.
- Audit and Security Readiness: Configuring unified logging, tracking, and alerting metrics within the platform to provide automated, tamper-evident audit trails for regulatory compliance officers.
- Crypto Agility Future Proofing: Introducing quantum-resistant architectures by leveraging Functionality Modules (FMs) inside Luna HSMs to safely prototype and implement early Post-Quantum Cryptography (PQC) or custom algorithms.

4. Technical Pre-Sales Solution Engineering

- PoC Execution Validation: Designing and proving out complex Proof-of-Concepts (PoCs) showing secure transaction flows, automated high-throughput scaling, or secure database migration.
- Technical Advisory: Collaborating with enterprise infrastructure architects, cloud security engineering squads, and C-level stakeholders to present risk mitigation strategies, overcome performance bottlenecks,



and map business security requirements into concrete technical topologies.

QUALIFICATIONS AND EXPERIENCE | About you

The ideal Technical Consultant :

We are seeking an experienced HSM Data Security Engineer with strong expertise in Thales Hardware Security Modules (Luna HSM / payShield 10K) to support enterprise security, cryptography, and payment security implementations.

Key Requirements

- 3 8 years in Information Security, Data Security, Cryptography, or HSM administration
- Hands-on experience with Thales Luna HSM and/or payShield 10K
- Experience in BFSI, banking, government, or payment security environments preferred

Technical Expertise

- HSM deployment, installation, configuration, and troubleshooting
- Key lifecycle management, HA setup, backups, DR, firmware upgrades
- Payment HSM experience (LMK, ZMK, TMK, PVK, CVK, BDK, ATM/POS integrations)
- Strong knowledge of PKI, SSL/TLS, encryption, digital certificates, and key management
- Linux (RHEL/CentOS/Ubuntu) and Windows Server
- Networking fundamentals (TCP/IP, DNS, firewalls)

Preferred Exposure

- Thales CipherTrust / SafeNet solutions
- Cloud HSM (AWS, Azure, GCP)
- PKI platforms (ADCS, EJBCA, DigiCert)
- Banking/payment security projects

Certifications (Nice to Have)

- Thales Luna / payShield / CipherTrust
- CISSP, CISM, CEH, Security+
- PCI PCIP
- Cloud security certifications (AWS / Azure / GCP)

Soft Skills

- Strong troubleshooting and analytical skills
- Positive communication and client-facing ability
- Ability to work independently and in teams
- Documentation and solution design experience
- Willingness to travel for deployments/support

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Technical Consultant (Mumbai)
🏢 Exclusive Networks
📍 Mumbai