Data Security Architect

Purview Services; Nagpur District; Hybrid; INR 3,000,000 - 5,400,000; Full time

Job summary

Purview Services is seeking a Data Security Architect to design secure cryptographic architectures across hybrid and multi-cloud environments, focusing on key management, encryption services, and data protection.

The role requires hands-on work with HSM (Thales), CTM, and KMS integrations, aligning with regulatory standards and driving automation for key rotation and resilience.

Qualifications

• Extensive experience in cybersecurity and cryptographic architecture.
• Hands-on with Thales HSM, CipherTrust Manager, and cloud KMS solutions.
• Strong knowledge of PKI, encryption algorithms (AES, RSA).
• Scripting skills (PowerShell, Bash) and automation experience.

Responsibilities

• Define enterprise security architecture for cryptographic services including HSM, CTM, and KMS.
• Deploy and manage HSMs for secure key storage and cryptographic operations.
• Configure KMS for cloud-native and hybrid environments (AWS KMS, Azure Key Vault).
• Drive automation for key rotation and lifecycle management.

Skills

Cybersecurity

Cryptographic architecture

Cloud security

Scripting (PowerShell, Bash)

Tools

Thales HSM

CipherTrust Manager

AWS KMS

Azure Key Vault

Job description

Job Title: Data Security Architect Cryptographic Services

Exp: 5+ years

Location: Chennai,Hyderabad,Pune,Bangalore,Greater Noida

Shifts: should be comfortable for 24/7

Role Overview

The Data Security Architect will design and implement secure architectures for cryptographic key management, encryption services, and data protection across hybrid and multi-cloud environments. This role focuses on integrating HSM, CTM, and KMS solutions to ensure robust security, compliance, and operational resilience.

Key Responsibilities

• Architecture & Design
  • Define enterprise security architecture for cryptographic services including HSM, CTM, and KMS.
  • Develop high-level and low-level design documents for encryption and key lifecycle management.
  • Ensure alignment with Zero Trust principles and regulatory frameworks (GDPR, PCI DSS, FIPS).
• Cryptographic Services
  • Deploy and manage Hardware Security Modules (HSM) for secure key storage and cryptographic operations.
  • Implement CipherTrust Manager (CTM) for centralized key orchestration and data-at-rest encryption.
  • Configure Key Management Systems (KMS) for cloud-native and hybrid environments (AWS KMS, Azure Key Vault).
  • Integrate BYOK (Bring Your Own Key) and KYOK (Keep Your Own Key) models for cloud security.
• Compliance & Governance
  • Map architecture to compliance standards (ISO 27001, NIST 800-53).
  • Conduct risk assessments and security audits for cryptographic systems.
  • Maintain documentation for regulatory and internal audits.
• Operational Excellence
  • Establish monitoring and alerting for cryptographic services.
  • Provide Level 3 support for HSM, CTM, and KMS platforms.
  • Drive automation for key rotation and lifecycle management using DevOps tools.

Required Skills & Experience

• 812 years in cybersecurity and cryptographic architecture.
• Hands-on experience with Thales HSM, CipherTrust Manager, and cloud KMS solutions (AWS, Azure).
• Strong knowledge of PKI, encryption algorithms (AES, RSA), and secure key lifecycle.
• Proficiency in scripting (PowerShell, Bash) and automation frameworks.
• Certifications preferred:
  • CISSP, CCSP
  • Vendor-specific (Thales CipherTrust, AWS Security Specialty, Microsoft SC-100)

Desired Skills

• Experience with hybrid deployments and multi-region replication.
• Familiarity with container security and Kubernetes secrets management.
• Strong communication and stakeholder engagement skills.