Data Security Engineer (Encryption / Tokenization / HSM)

PAN INDIA Bengaluru, Hyderabad, Pune, Chennai, Gurugram, Noida, Mumbai, Kolkata

Job description*

Role & Responsibilities:

• Provide 24x7 support for data security and encryption services in production systems.
• Manage Key Management Systems (KMS) and Tokenization platforms (Thales, Fortanix, Protegrity).
• Perform encryption key lifecycle operations generation, rotation, expiration, archival.
• Troubleshoot encryption/decryption failures, key access issues, and DB/storage integration problems.
• Onboard applications into Thales/Fortanix/Protegrity platforms.
• Work closely with Infra/Cloud/BAU teams to implement enterprise encryption strategies.
• Lead/participate in security audits, risk assessments, and compliance reporting.
• Document SOPs, runbooks, and mentor junior engineers.

Preferred Candidate Profile:

• 812 years of IT experience, with minimum 5 years in Data Security / Encryption / Tokenization.
• Hands-on with Thales CipherTrust Manager, Vormetric, Fortanix DSM, Protegrity.
• Strong understanding of cryptographic standards AES, RSA, PKCS, KMIP.
• Exposure to Linux/Unix/Windows administration & shell scripting.
• Familiarity with AWS KMS, Azure Key Vault, Google Cloud KMS.
• Strong communication, leadership, and problem-solving skills.