Role & responsibilities

Encryption Key Solution Engineer responsible for designing, implementing, and supporting enterprise centralized key management and data protection solutions using Thales CipherTrust Manager (CTM) and Thales encryption products (e.g., HSMs, key vaults, tokenization) across hybrid (onprem) and cloud environments. The role owns secure key lifecycle processes (generation, rotation, escrow, revocation, destruction), integrates key management with applications, databases, and cloud platforms (AWS/Azure/GCP) via KMIP and APIs, partners with security/DevOps/infrastructure teams to embed encryption best practices, supports compliance initiatives (PCI-DSS, HIPAA, SOX, GDPR), troubleshoots complex encryption issues,



and produces architecture/documentation/runbooks while providing technical guidance to other engineers

Preferred candidate profile
- Thales CipherTrust Manager (CTM)
- Thales HSMs (e.g., Luna HSM)
- Key lifecycle management

(generation, rotation, escrow, revocation, destruction)
- KMIP protocol
- Cryptographic algorithms (AES, RSA, ECC, SHA-2/3)
- PKI concepts and certificate lifecycle management
- TLS/SSL and secure communications
- Cloud key management services/integrations

(AWS KMS, Azure Key Vault, GCP KMS)

📌 Senior Cloud Engineer (Gurugram)
🏢 SP Software
📍 Gurugram