Job Title: Data Security Architect Cryptographic Services

Exp: 5+ years

Location: Chennai,Hyderabad,Pune,Bangalore,Greater Noida

Shifts: should be comfortable for 24/7

Role Overview

The Data Security Architect will design and implement secure architectures for cryptographic key management, encryption services, and data protection across hybrid and multi-cloud environments. This role focuses on integrating HSM, CTM, and KMS solutions to ensure robust security, compliance, and operational resilience.

Key Responsibilities

- Architecture & Design
- Define enterprise security architecture for cryptographic services including HSM, CTM, and KMS.
- Develop high-level and low-level design documents for encryption and key lifecycle management.
- Ensure alignment with Zero Trust principles and regulatory frameworks (GDPR, PCI DSS, FIPS).

- Cryptographic Services

- Deploy and manage Hardware Security Modules (HSM) for secure key storage and cryptographic operations.
- Implement CipherTrust Manager (CTM) for centralized key orchestration and data-at-rest encryption.
- Configure Key Management Systems (KMS) for cloud-native and hybrid environments (AWS KMS, Azure Key Vault).
- Integrate BYOK (Bring Your Own Key) and KYOK (Keep Your Own Key) models for cloud security.





- Compliance & Governance

- Map architecture to compliance standards (ISO 27001, NIST 800-53).
- Conduct risk assessments and security audits for cryptographic systems.
- Maintain documentation for regulatory and internal audits.

- Operational Excellence

- Establish monitoring and alerting for cryptographic services.
- Provide Level 3 support for HSM, CTM, and KMS platforms.
- Drive automation for key rotation and lifecycle management using DevOps tools.

Required Skills & Experience

- 812 years in cybersecurity and cryptographic architecture.
- Hands-on experience with Thales HSM, CipherTrust Manager, and cloud KMS solutions (AWS, Azure).
- Solid knowledge of PKI, encryption algorithms (AES, RSA), and secure key lifecycle.
- Proficiency in scripting (PowerShell, Bash) and automation frameworks.
- Certifications preferred:
- CISSP, CCSP
- Vendor-specific (Thales CipherTrust, AWS Security Specialty, Microsoft SC-100)

Desired Skills

- Experience with hybrid deployments and multi-region replication.
- Familiarity with container security and Kubernetes secrets management.
- Strong communication and stakeholder engagement skills.

📌 Data Security Architect (Kochi)
🏢 Purview Services
📍 Kochi