Key Management and Cryptographic Security Engineer

Pixelcode Technologies India; Hyderabad; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Pixelcode Technologies India seeks an experienced Key Management & Cryptographic Security Engineer to oversee enterprise cryptographic environments, covering key lifecycle, HSMs, PKI, and secure device provisioning. The role involves security compliance, production support, and troubleshooting across various environments.

The candidate should have hands-on experience with key ceremonies, cryptographic operations, and maintaining audit evidence while ensuring robust security practices in a

Qualifications

• Experience with cryptographic key lifecycle management and HSMs.
• Strong knowledge of PKI, digital certificates, CAs and key pairs.
• Familiarity with TLS/mTLS, cryptographic standards and NIST guidance.

Responsibilities

• Manage cryptographic key lifecycle across environments, including generation, rotation, and secure destruction.
• Administer and support hardware security modules (HSMs) and enterprise KMS/SAMs.
• Manage PKI infrastructure, certificates, certificate authorities, and key management processes.
• Ensure compliance with relevant cryptographic standards and security policies.
• Provide production support, troubleshooting and root-cause analysis for cryptographic services.

Skills

Key lifecycle management

HSM administration

PKI & certificates

TLS/mTLS knowledge

NIST guidance familiarity

Security incident analysis

Scripting/automation

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Tools

HSMs

PKI tooling

Certificate Authorities

Job description

Key Management & Cryptographic Security Engineer

Role Summary

We are seeking an experienced Key Management & Cryptographic Security Engineer to manage and support enterprise cryptographic security environments, including key management, HSMs, PKI/certificates, encryption and secure device provisioning. The role covers the full cryptographic key lifecycle, controlled key ceremonies, security compliance, production support and troubleshooting across multiple environments.

Key Responsibilities & Skills

• Manage the complete cryptographic key lifecycle including generation, distribution, activation, rotation, renewal, revocation, backup, recovery and secure destruction.
• Administer and support Hardware Security Modules (HSMs), enterprise KMS, SAMs and associated cryptographic services.
• Manage PKI, digital certificates, Certificate Authorities, certificate chains, public/private keys and digital signatures.
• Strong knowledge of symmetric cryptography including AES, DES/3DES, DUKPT, MACs, hashing, key derivation/diversification, key wrapping and key exchange.
• Good understanding of TLS/mTLS, asymmetric cryptography and cryptographic key-management lifecycles, including relevant NIST guidance.
• Support controlled key ceremonies, key injection and secure device-provisioning activities.
• Troubleshoot encryption, certificate, secure-messaging, key-injection and HSM-related production issues and perform root-cause analysis.
• Assess the end-to-end security and operational impact of key, certificate, device and cryptographic configuration changes.
• Maintain accurate key inventories, configurations, runbooks, technical documentation and audit evidence.
• Knowledge of payment security concepts such as BDKs, KSNs, KEKs, Terminal Master Keys, PIN cryptography and key blocks is desirable.
• Experience with contactless smartcards, secure elements, embedded security or secure credential technologies is advantageous.
• Familiarity with standards such as PCI PTS POI, PCI P2PE, PCI Mobile Payments on COTS and ISO/IEC 27000 is beneficial.
• Scripting or automation experience for monitoring, validation, reporting and controlled security operations is preferred.
• Degree in Cybersecurity, Computer Science, Electronics, Engineering or equivalent professional experience; CISSP, CCSP, Security+, ISO 27001, PCI or HSM/KMS certifications are advantageous.