Data Security Engineer

Role - Security Engineer

Required Technical Skill Set** HSM,KMS,Encryption,Hashing, Cryprtographic Algorithm

Technical/Behavioral Competency/Skills -

• Deploy, configure, and manage enterprise Thales HSM.
• Configure and manage cryptographic key lifecycle management using industry best practices.
• Implement Hardware Security Modules for secure storage of encryption keys and digital certificates.
• Perform HSM clustering, HA configuration, backup, restoration, and disaster recovery planning.
• Configure cryptographic algorithms including AES-256, RSA-2048/4096, ECC, SHA-256/512, TLS 1.2/1.3.
• Deploy and manage Thales CipherTrust Manager (KMS) environments.
• Configure centralized encryption key management for enterprise applications.
• Administer Public Key Infrastructure (PKI) and certificate lifecycle management.
• Integrate Mudhra DSC and eSign solutions with enterprise applications.
• Manage digital certificates, code-signing certificates, SSL/TLS certificates, and document signing infrastructure.
• Configure OCSP, CRL, certificate renewal, revocation, and issuance workflows.
• Implement Aadhaar Data Vault architecture as per UIDAI guidelines.
• Secure Aadhaar information using tokenization, encryption, masking, and vaulting technologies.
• Implement encryption for data at rest, data in transit, and data in use.
• Monitor security events, HSM logs, KMS activities, and PKI events using SIEM platforms.
• Implement RSA (Rivest, Shamir, Adleman) algorithm to generate the public key and private key stored in a Hardware Security Module (HSM).
• Implement HSM based Digital Signature Certificates for 10,000 ITD officers with signing authority.
• Configuration and Implementation of CADP and KMIP

Good to Have- HSM,KMS,Data encryption,hashing, cryprtographic Algorithm and other enterprise security technologies

Responsibility of / Expectations from the Role**- Design and implement enterprise-wide data encryption solutions for data at rest, data in transit, and data in use. Configure and maintain TLS/SSL certificates, PKI infrastructure, and certificate lifecycle management. Configure OCSP, CRL, certificate renewal, revocation, and issuance workflows.

2.

Deploy, configure, and manage enterprise Thales HSM. Configure and manage cryptographic key lifecycle management using industry best practices.Implement Hardware Security Modules for secure storage of encryption keys and digital certificates.Perform HSM clustering, HA configuration, backup, restoration, and disaster recovery planning.Configure cryptographic algorithms including AES-256, RSA-2048/4096, ECC, SHA-256/512, TLS 1.2/1.3.

3.

Deploy and manage Thales CipherTrust Manager (KMS) environments.Configure centralized encryption key management for enterprise applications. Administer Public Key Infrastructure (PKI) and certificate lifecycle management.Integrate Mudhra DSC and eSign solutions with enterprise applications.Manage digital certificates, code-signing certificates, SSL/TLS certificates, and document signing infrastructure.

4.

Implement Aadhaar Data Vault architecture as per UIDAI guidelines.Secure Aadhaar information using tokenization, encryption, masking, and vaulting technologies.

5.

Implement encryption for data at rest, data in transit, and data in use.Monitor security events, HSM logs, KMS activities, and PKI events using SIEM platforms.

6.

Implement RSA (Rivest, Shamir, Adleman) algorithm to generate the public key and private key stored in a Hardware Security Module (HSM).Implement HSM based Digital Signature Certificates for 10,000 ITD officers with signing authority.Configuration and Implementation of CADP and KMIP.da