The Data Vault KMS Specialist will be responsible for the design implementation integration and operations of secure Data Vault and cryptographic key management services
The role focuses on ensuring that sensitive identity data such as Aadhaar number PAN and eKYC artifacts are securely tokenized encrypted stored and accessed in compliance with regulatory and policies
The candidate will work closely with architecture application and infrastructure teams to enable privacybydesign secure storage and controlled retrieval mechanisms using HSMbacked KMS systems
Key Responsibilities
1 Data Vault Implementation
Design and implement vaultbased tokenization and detokenization mechanisms for sensitive identifiers
Ensure that plain data is never exposed outside vault boundary and only reference tokens are used by consuming applications
Develop and maintain secure APIbased access mechanisms for vault services
Implement bulk tokenization migration and onboarding processes securely
2 Cryptographic Key Management KMS HSM
Design and manage cryptographic key lifecycle generation rotation storage archival destruction using KMSHSM solutions
Implement and integrate HSMbacked encryption for data AES256 RSAECC as applicable
Ensure that encryptiondecryption keys never leave HSM boundary
Define and implement crypto policies aligned with security architecture and compliance requirements
3 Security Architecture Data Protection
Ensure endtoend encryption data in transit at rest and in use for vault data
Enforce tokenization masking and privacybydesign principles for sensitive identity data
Implement finegrained access control least privilege and segregation of duties
Design secure vault deployment zones isolated from untrusted networks
4 Access Control API Security
Implement authentication and authorization controls for vault APIs JWT service identity etc
Ensure detokenization is strictly controlled and allowed only for authorized business
📌 Senior Data Engineer (Noida)
🏢 LTM
📍 Noida
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.