Data Security Architect

Purview Services; Coimbatore District; Hybrid; INR 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Shift flexibility

Multi-cloud exposure

Job summary

Purview Services seeks a Data Security Architect to design and implement secure cryptographic architectures across hybrid and multi-cloud environments. You will integrate HSM, CTM, and KMS solutions for robust security and regulatory compliance, while enabling key lifecycle automation and 24/7 operational support.

Responsibilities include defining security architecture, deploying HSMs, and ensuring compliance with GDPR, PCI DSS, and FIPS, with hands-on work in Thales HSM, CipherTrust Manager,

Qualifications

• Minimum 5+ years in cybersecurity and cryptographic architecture.
• Hands-on with Thales HSM, CipherTrust Manager, and cloud KMS (AWS/Azure).
• Strong PKI, AES/RSA, and key lifecycle knowledge.
• Scripting and automation: PowerShell, Bash.
• Certifications: CISSP, CCSP; vendor certs welcome.

Responsibilities

• Define secure architectures for cryptographic services (HSM, CTM, KMS).
• Deploy and manage HSMs for secure key storage and ops.
• Implement CTM for centralized key orchestration and data-at-rest encryption.
• Configure cloud KMS across multi-cloud environments (AWS, Azure).
• Ensure compliance with GDPR, PCI DSS, and FIPS.

Skills

Cryptographic architecture

HSM management

KMS (Cloud)

Threat modeling

PowerShell/Bash

Regulatory compliance

Education

Bachelor's in CS/IT

CISSP/CCSP

Tools

CipherTrust Manager

Thales HSM

AWS KMS

Azure Key Vault

PKI/Encryption

Job description

Job Title: Data Security Architect Cryptographic Services

Exp: 5+ years

Location: Chennai,Hyderabad,Pune,Bangalore,Greater Noida

Shifts: should be comfortable for 24/7

Role Overview

The Data Security Architect will design and implement secure architectures for cryptographic key management, encryption services, and data protection across hybrid and multi-cloud environments. This role focuses on integrating HSM, CTM, and KMS solutions to ensure robust security, compliance, and operational resilience.

Key Responsibilities

• Architecture & Design
  • Define enterprise security architecture for cryptographic services including HSM, CTM, and KMS.
  • Develop high-level and low-level design documents for encryption and key lifecycle management.
  • Ensure alignment with Zero Trust principles and regulatory frameworks (GDPR, PCI DSS, FIPS).
• Cryptographic Services
  • Deploy and manage Hardware Security Modules (HSM) for secure key storage and cryptographic operations.
  • Implement CipherTrust Manager (CTM) for centralized key orchestration and data-at-rest encryption.
  • Configure Key Management Systems (KMS) for cloud-native and hybrid environments (AWS KMS, Azure Key Vault).
  • Integrate BYOK (Bring Your Own Key) and KYOK (Keep Your Own Key) models for cloud security.
• Compliance & Governance
  • Map architecture to compliance standards (ISO 27001, NIST 800-53).
  • Conduct risk assessments and security audits for cryptographic systems.
  • Maintain documentation for regulatory and internal audits.
• Operational Excellence
  • Establish monitoring and alerting for cryptographic services.
  • Provide Level 3 support for HSM, CTM, and KMS platforms.
  • Drive automation for key rotation and lifecycle management using DevOps tools.

Required Skills & Experience

• 812 years in cybersecurity and cryptographic architecture.
• Hands-on experience with Thales HSM, CipherTrust Manager, and cloud KMS solutions (AWS, Azure).
• Strong knowledge of PKI, encryption algorithms (AES, RSA), and secure key lifecycle.
• Proficiency in scripting (PowerShell, Bash) and automation frameworks.
• Certifications preferred:
  • CISSP, CCSP
  • Vendor-specific (Thales CipherTrust, AWS Security Specialty, Microsoft SC-100)

Desired Skills

• Experience with hybrid deployments and multi-region replication.
• Familiarity with container security and Kubernetes secrets management.
• Strong communication and stakeholder engagement skills.