Position: Security Architect - Cryptography & HSM (Crypto Architect, Band 'F')

Location: UIDAI Technology Centre, Bengaluru | On-site | Full time

UIDAI operates the world's largest biometric identity platform. The Crypto Architect owns the cryptographic backbone of that platform - key lifecycle, the HSM estate, and the security architecture of the applications built on top of it. This is a hands-on architecture role, not an audit or GRC role.

WHAT YOU WILL DO

- Cryptographic and Security Architecture
- Design and implement enterprise-grade cryptographic architecture - encryption, digital signatures, tokenisation, key derivation and secure protocol design.
- Own the HSM architecture end to end: deployment, partitioning, high availability, firmware / FIPS compliance and application integration via PKCS#11, JCE / JCA and KMIP.
- Define the key management lifecycle - generation, distribution, rotation, escrow, archival and destruction - with supporting policy and procedure.
- Translate security requirements into application-level design, secure prototypes and reusable cryptographic libraries for engineering teams.
- Secure Engineering and Implementation
- Hands-on implementation and code review of cryptographic modules in C, C++, Java, Go or Rust.
- Design secure network and application solutions; embed security into the SDLC and CI/CD pipeline.
- Drive secure code review, cryptographic validation and remediation of findings.
- Risk, Threat Modelling and Assurance
- Identify threats, vulnerabilities and risks across the IT infrastructure and perform structured threat modelling.
- Plan and oversee security testing, VAPT and cryptographic assessments; track findings through to closure.




- Maintain security architecture documentation, standards and technical artefacts.
- Compliance and Governance
- Align architecture with ISO/IEC 27001, ITIL, NIST, FIPS 140-2 / 140-3 and UIDAI's information security policy framework.
- Support audits, certification and regulatory reviews with evidence and design rationale.

ESSENTIAL QUALIFICATIONS

- BE / B.Tech / ME / M.Tech / MS / MCA / M.Sc in Computer Science, IT, Electronics or a related discipline.
- Minimum 5 years of experience in IT security, with demonstrable depth in applied cryptography.

ESSENTIAL SKILLS

- Excellent understanding of cryptographic algorithms (AES, RSA, ECC, SHA-2 / SHA-3, HMAC, TLS 1.3) with hands-on implementation experience, not theoretical knowledge alone.
- Knowledge of HSM architecture including application integration (Thales / Luna, Utimaco, Entrust or equivalent).
- Strong programming ability in at least one of: C, C++, Java, Go, Rust.
- Sound knowledge of IT security processes and best practices (ITIL, ISO 27001).
- PKI, certificate lifecycle management and key management systems.

DESIRABLE

- Exposure to large-scale, high-throughput national or BFSI-grade platforms.
- CISSP / CISSP-ISSAP / CCSP / CEH or equivalent certification.
- Post-quantum cryptography migration planning, secure enclaves or confidential computing.
- Familiarity with Aadhaar ecosystem security standards, the UIDAI Information Security Policy or CERT-In guidelines.

PLEASE NOTE: This is a cryptography and information security role. It is NOT a blockchain, cryptocurrency, Web3 or DeFi position.

Engagement is through GA Digital Web Word Pvt Ltd for deployment at UIDAI Technology Centre, Bengaluru.

📌 Security Architect - Cryptography & HSM (Bengaluru)
🏢 Unique Identification Authority of India (UIDAI)
📍 Bengaluru