Data Security Engineer

Tata Consultancy Services Limited; Dadri, Gurugram District, Delhi; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

HSM deployment

CipherTrust Manager

PKI & Certificate Lifecycle

Disaster Recovery

Job summary

Tata Consultancy Services in India is seeking a Security Engineer to design and implement enterprise-grade cryptography solutions, manage HSMs, and oversee PKI and certificate lifecycles.

You will deploy Thales HSM and CipherTrust Manager, configure KMS environments, enforce encryption for data at rest and in transit, monitor security events, and contribute to disaster recovery planning. Experience with Aadhaar Data Vault concepts is a plus.

Qualifications

• Experience deploying HSMs in enterprise environments.
• Knowledge of cryptographic key lifecycle management.
• Proficiency with PKI, certificates, and TLS/SSL workflows.

Responsibilities

• Design and implement enterprise-wide data encryption solutions for data at rest, in transit, and in use.
• Configure HSMs, KMS environments, and cryptographic algorithms (AES-256, RSA-2048/4096, ECC).
• Manage PKI infrastructure and certificate lifecycles, including OCSP/CRL workflows.
• Monitor HSM/KMS/PKI events using SIEM platforms and ensure disaster recovery readiness.
• Integrate Aadhaar Data Vault architecture and tokenization strategies as needed.
• Support digital signing certificates and code-signing certs for enterprise apps.

Skills

HSM deployment

KMS management

PKI and certificate lifecycle

Encryption protocols

Disaster recovery planning

SIEM monitoring

TLS/SSL configuration

RSA/AES algorithms

Tools

Thales HSM

Thales CipherTrust Manager

Mudhra DSC & eSign

Job description

Role - Security Engineer

Required Technical Skill Set*

* HSM,KMS,Encryption,Hashing, Cryprtographic Algorithm

Technical/Behavioral Competency/Skills

• Deploy, configure, and manage enterprise Thales HSM.
• Configure and manage cryptographic key lifecycle management using industry best practices.
• Implement Hardware Security Modules for secure storage of encryption keys and digital certificates.
• Perform HSM clustering, HA configuration, backup, restoration, and disaster recovery planning.
• Configure cryptographic algorithms including AES-256, RSA-2048/4096, ECC, SHA-256/512, TLS 1.2/1.3.
• Deploy and manage Thales CipherTrust Manager (KMS) environments.
• Configure centralized encryption key management for enterprise applications.
• Administer Public Key Infrastructure (PKI) and certificate lifecycle management.
• Integrate Mudhra DSC and eSign solutions with enterprise applications.
• Manage digital certificates, code-signing certificates, SSL/TLS certificates, and document signing infrastructure.
• Configure OCSP, CRL, certificate renewal, revocation, and issuance workflows.
• Implement Aadhaar Data Vault architecture as per UIDAI guidelines.
• Secure Aadhaar information using tokenization, encryption, masking, and vaulting technologies.
• Implement encryption for data at rest, data in transit, and data in use.
• Monitor security events, HSM logs, KMS activities, and PKI events using SIEM platforms.
• Implement RSA (Rivest, Shamir, Adleman) algorithm to generate the public key and private key stored in a Hardware Security Module (HSM).
• Implement HSM based Digital Signature Certificates for 10,000 ITD officers with signing authority.
• Configuration and Implementation of CADP and KMIP

Good to Have-

HSM,KMS,Data encryption,hashing, cryprtographic Algorithm and other enterprise security technologies

Responsibility of / Expectations from the Role**-

Design and implement enterprise-wide data encryption solutions for data at rest, data in transit, and data in use. Configure and maintain TLS/SSL certificates, PKI infrastructure, and certificate lifecycle management. Configure OCSP, CRL, certificate renewal, revocation, and issuance workflows.

2.

Deploy, configure, and manage enterprise Thales HSM. Configure and manage cryptographic key lifecycle management using industry best practices. Implement Hardware Security Modules for secure storage of encryption keys and digital certificates. Perform HSM clustering, HA configuration, backup, restoration, and disaster recovery planning. Configure cryptographic algorithms including AES-256, RSA-2048/4096, ECC, SHA-256/512, TLS 1.2/1.3.

3.

Deploy and manage Thales CipherTrust Manager (KMS) environments. Configure centralized encryption key management for enterprise applications. Administer Public Key Infrastructure (PKI) and certificate lifecycle management. Integrate Mudhra DSC and eSign solutions with enterprise applications. Manage digital certificates, code-signing certificates, SSL/TLS certificates, and document signing infrastructure.

4.

Implement Aadhaar Data Vault architecture as per UIDAI guidelines. Secure Aadhaar information using tokenization, encryption, masking, and vaulting technologies.

5.

Implement encryption for data at rest, data in transit, and data in use. Monitor security events, HSM logs, KMS activities, and PKI events using SIEM platforms.

6.

Implement RSA (Rivest, Shamir, Adleman) algorithm to generate the public key and private key stored in a Hardware Security Module (HSM). Implement HSM based Digital Signature Certificates for 10,000 ITD officers with signing authority. Configuration and Implementation of CADP and KMIP.da