TECHNICAL LEAD - Thales

Happiest Minds Technologies; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Happiest Minds Technologies in Bengaluru is seeking an experienced Thales Encryption Engineer to deliver engineering, operational, and project support for CipherTrust Manager (CTM) and HSM administration. The role emphasizes encryption technologies, key lifecycle management, and compliance across security audits.

You will collaborate across infrastructure, security, and application teams to configure CTM, manage HSM partitions, perform health checks, upgrades, and documentation, aligning

Qualifications

• Experience with Thales CipherTrust Manager (CTM).
• Experience with encryption at rest and data protection technologies.
• Strong knowledge of key management and HSM concepts.
• Proficient Windows and Linux server administration.
• Experience supporting security compliance and audits.
• Excellent troubleshooting and documentation skills.

Responsibilities

• Administer and support Thales CipherTrust Manager (CTM) platform.
• Configure, upgrade, and maintain CipherTrust infrastructure.
• Manage encryption policies, key lifecycles, and security controls.
• Configure clustering, high availability, auditing, and logging features.
• Assist onboarding of applications to the Thales platform.
• Perform health checks, patching, and routine maintenance.
• Align encryption controls with security and compliance requirements.
• Produce SOPs and technical standards.

Skills

CipherTrust Manager

Encryption at Rest

Key Management & HSM

Windows & Linux admin

Security compliance & audits

Documentation & troubleshooting

Job description

Job Summary

We are seeking a skilled Thales Encryption Engineer to provide engineering, operational, and project support for organisation's Thales encryption platforms, including Cipher Trust Manager (CTM) and Hardware Security Module (HSM) administration. The ideal candidate will have a strong background in encryption technologies, key lifecycle management, and compliance support, with a focus on delivering high-quality solutions in a collaborative environment.

Responsibilities

• Administer and support the Thales CipherTrust Manager (CTM) platform.
• Install, configure, upgrade, and maintain CipherTrust infrastructure.
• Manage encryption policies, key lifecycle management, and security controls.
• Configure clustering, high availability, auditing, and logging features.
• Support onboarding of new applications and systems to the Thales platform.
• Perform health checks, upgrades, patching, and operational maintenance.
• Review and align encryption controls with security and compliance requirements.
• Produce operational documentation, SOPs, and technical standards.
• Collaborate with infrastructure, security, application, and project teams on encryption-related initiatives.
• Manage and administer enterprise HSM infrastructure.
• Configure HSM partitions, key stores, and security domains.
• Perform HSM provisioning, initialization, firmware upgrades, and lifecycle management.
• Maintain HSM backup, recovery, synchronization, and restoration procedures.
• Support cryptographic key generation and protection using HSM-backed controls.
• Ensure secure storage and management of master keys, root keys, wrapping keys, and encryption certificates.
• Coordinate HSM capacity planning, resilience testing, and disaster recovery readiness activities.
• Support future HSM implementation, migration, and onboarding projects.
• Support internal, external, customer, ISAE, ISO27001, SOC, and regulatory audits.
• Produce encryption evidence, control documentation, audit reports, and compliance artifacts.
• Maintain audit logs, evidence repositories, and encryption compliance records.
• Review and remediate audit findings and control gaps.
• Ensure encryption controls align with applicable regulatory and security frameworks including ISO27001, ISAE 3402, GDPR, and Corporate Information Security Standards.

Mandatory Skills

• Thales CipherTrust Manager
• Encryption at Rest and Data Protection technologies
• Key Management and HSM concepts
• Windows and Linux server administration
• Security compliance and audit support
• Strong troubleshooting and documentation skills