Key Management & Cryptographic Security Engineer

Role Summary

We are seeking an experienced Key Management & Cryptographic Security Engineer to manage and support enterprise cryptographic security environments, including key management, HSMs, PKI/certificates, encryption and secure device provisioning. The role covers the full cryptographic key lifecycle, controlled key ceremonies, security compliance, production support and troubleshooting across multiple environments.

Key Responsibilities & Skills

- Manage the complete cryptographic key lifecycle including generation, distribution, activation, rotation, renewal, revocation, backup, recovery and secure destruction.
- Administer and support Hardware Security Modules (HSMs), enterprise KMS, SAMs and associated cryptographic services.
- Manage PKI, digital certificates, Certificate Authorities, certificate chains, public/private keys and digital signatures.
- Strong knowledge of symmetric cryptography including AES, DES/3DES, DUKPT, MACs, hashing, key derivation/diversification, key wrapping and key exchange.
- Good understanding of TLS/mTLS, asymmetric cryptography and cryptographic key-management lifecycles, including relevant NIST guidance.
- Support controlled key ceremonies,



key injection and secure device-provisioning activities.
- Troubleshoot encryption, certificate, secure-messaging, key-injection and HSM-related production issues and perform root-cause analysis.
- Assess the end-to-end security and operational impact of key, certificate, device and cryptographic configuration changes.
- Maintain accurate key inventories, configurations, runbooks, technical documentation and audit evidence.
- Knowledge of payment security concepts such as BDKs, KSNs, KEKs, Terminal Master Keys, PIN cryptography and key blocks is desirable.
- Experience with contactless smartcards, secure elements, embedded security or secure credential technologies is advantageous.
- Familiarity with standards such as PCI PTS POI, PCI P2PE, PCI Mobile Payments on COTS and ISO/IEC 27000 is beneficial.
- Scripting or automation experience for monitoring, validation, reporting and controlled security operations is preferred.
- Degree in Cybersecurity, Computer Science, Electronics, Engineering or equivalent skilled experience; CISSP, CCSP, Security+, ISO 27001, PCI or HSM/KMS certifications are advantageous.

If Interested please mail your resume to [email protected]

📌 Key Management and Cryptographic Security Engineer (Hyderabad)
🏢 Pixelcode Technologies India
📍 Hyderabad