Job Title : Security Engineer (CipherTust)

Location : Hyderabad & Pune & Bangalore (Hybrid 3 Days wfo)

Experience : 4+Years

Notice Period : Immediate

Key Responsibilities :

- Manage and maintain the Thales CipherTrust Manager (CTM) and Transparent Encryption (CTE) across on-prem and cloud systems.

- Implement and administer Public Key Infrastructure (PKI) including root and subordinate CA, certificate templates, CRL/OCSP, and auto-enrollment.

- Oversee lifecycle of SSL/TLS certificates using AppViewX Cert+, including discovery, renewal, and policy compliance.

- Configure, monitor, and maintain HSMs (Thales Luna, CloudHSM, CipherTrust) for secure key storage and cryptographic operations.

- Support tokenization, encryption (data at rest/in transit), and key rotation strategies for compliance and security best practices.

- Coordinate BYOK / HYOK implementations for public cloud platforms (AWS, Azure, GCP).

- Ensure cryptographic compliance with NIST, PCI-DSS, GDPR, and internal policies.

- Automate certificate/key provisioning processes and integrate with CI/CD pipelines and DevOps workflows.

- Conduct periodic SSH key audits, access reviews, and enforce privileged access controls.

- Provide operational support, incident response, and troubleshooting for crypto-related services.

Required Skills & Qualifications :

- 4+ years of experience in Thales CipherTrust, Luna HSM, and/or CloudHSM.

- Hands-on experience in enterprise encryption, PKI, and key management.

- Strong knowledge of X.509 certificates, TLS/SSL, CRL/OCSP, and ACME protocol.

- Experience with AppViewX or similar CLM platforms (Venafi, DigiCert CertCentral, etc.).

- Understanding of symmetric/asymmetric encryption, SSH key management, and certificate pinning.

- Scripting experience (e.g., Python, PowerShell, Bash) to automate cryptographic tasks.