Position: Security Architect
- Cryptography & HSM (Crypto Architect, Band 'F')

Location:
UIDAI Technology Centre, Bengaluru | On-site | Full-time UIDAI operates the world's largest biometric identity platform. The Crypto Architect owns the cryptographic backbone of that platform
- key lifecycle, the HSM estate, and the security architecture of the applications built on top of it. This is a hands-on architecture role, not an audit or GRC role. WHAT YOU WILL DO 1) Cryptographic and Security Architecture
• Design and implement enterprise-grade cryptographic architecture
- encryption, digital signatures, tokenisation, key derivation and secure protocol design.
• Own the HSM architecture end to end: deployment, partitioning, high availability, firmware / FIPS compliance and application integration via PKCS#11, JCE / JCA and KMIP.
• Define the key management lifecycle
- generation, distribution, rotation, escrow, archival and destruction
- with supporting policy and procedure.
• Translate security requirements into application-level design, secure prototypes and reusable cryptographic libraries for engineering teams. 2) Secure Engineering and Implementation
• Hands-on implementation and code review of cryptographic modules in C, C++, Java, Go or Rust.
• Design secure network and application solutions; embed security into the SDLC and CI/CD pipeline.
• Drive secure code review, cryptographic validation and remediation of findings. 3) Risk, Threat Modelling and Assurance
• Identify threats, vulnerabilities and risks across the IT infrastructure and perform structured threat modelling.
• Plan and oversee security testing, VAPT and cryptographic assessments; track findings through to closure.




• Maintain security architecture documentation, standards and technical artefacts. 4) Compliance and Governance
• Align architecture with ISO/IEC 27001, ITIL, NIST, FIPS 140-2 / 140-3 and UIDAI's information security policy framework.
• Support audits, certification and regulatory reviews with evidence and design rationale. ESSENTIAL QUALIFICATIONS
• BE / B.
Tech / ME / M.
Tech / MS / MCA / M.
Sc in Computer Science, IT, Electronics or a related discipline.
• Minimum 5 years of experience in IT security, with demonstrable depth in applied cryptography. ESSENTIAL SKILLS
• Excellent understanding of cryptographic algorithms (AES, RSA, ECC, SHA-2 / SHA-3, HMAC, TLS 1.3) with hands-on implementation experience, not theoretical knowledge alone.
• Knowledge of HSM architecture including application integration (Thales / Luna, Utimaco, Entrust or equivalent).
• Robust programming ability in at least one of: C, C++, Java, Go, Rust.
• Sound knowledge of IT security processes and best practices (ITIL, ISO 27001).
• PKI, certificate lifecycle management and key management systems. DESIRABLE
• Exposure to large-scale, high-throughput national or BFSI-grade platforms.
• CISSP / CISSP-ISSAP / CCSP / CEH or equivalent certification.
• Post-quantum cryptography migration planning, secure enclaves or confidential computing.
• Familiarity with Aadhaar ecosystem security standards, the UIDAI Information Security Policy or CERT-In guidelines. PLEASE NOTE: This is a cryptography and information security role. It is NOT a blockchain, cryptocurrency, Web3 or DeFi position. Engagement is through GA Digital Web Word Pvt Ltd for deployment at UIDAI Technology Centre, Bengaluru.

📌 Security Architect (Bengaluru)
🏢 Unique Identification Authority of India (UIDAI)
📍 Bengaluru