Cloud Crypto Architect

Job Title : Cloud Crypto Architect. Location : Bangalore / Gurugram / Noida. Experience : 7+ Years. Role Overview : We are seeking a highly skilled Cloud Crypto Architect to design, implement, and manage cryptographic solutions that secure sensitive data in cloud environments. The ideal candidate will have a strong background in cryptography, key management, and cloud-native security practices. You will collaborate with engineering, security, and compliance teams to ensure data protection, regulatory compliance, and secure communication across multiple cloud service providers (CSPs). Key Responsibilities : Cryptography & Key Management : - Develop and maintain a deep understanding of core cryptographic concepts, standards, and their application in cloud environments. - Implement secure Key Management Systems (KMS), including management of keys, certificates, and cryptographic assets. - Ensure secure key lifecycle management (generation, distribution, storage, rotation, and retirement). - Work with Certificate Authorities to issue, manage, and validate certificates. Cloud Security Architecture : - Design cryptographic controls aligned with CSP-native services (AWS KMS, Azure Key Vault, GCP KMS, etc. - Define and enforce secure Key Exchange mechanisms between CSPs and enterprise systems. - Assist with Service Control Policies (SCPs) to ensure adherence to security baselines. Automation & Infrastructure as Code (IaC) : - Prototype, build, and maintain GitHub and Terraform modules for cryptographic services (KMS, certificates, and other assets). - Automate provisioning of cryptographic resources and integrate with CI/CD pipelines. Application & Data Protection : - Build and deploy custom applications for encryption, tokenization, and secure data protection. - Validate and monitor cryptographic services, ensuring compliance with regulatory and organizational security standards. - Conduct audits and support service certifications to meet compliance frameworks (PCI-DSS, GDPR, ISO, etc. Governance, Documentation & Compliance : - Create and improve security documentation, policies, and technical playbooks. - Support internal and external audits related to data protection and encryption practices. - Provide subject matter expertise in cloud crypto security to engineering and business teams. Required Skills & Qualifications : - Strong understanding of cryptography fundamentals (symmetric/asymmetric encryption, hashing, digital signatures, PKI). - Hands-on experience with Key Management Systems and certificate lifecycle management. - Familiarity with cloud provider cryptographic services (AWS KMS, Azure Key Vault, GCP KMS). - Proficiency with Terraform, GitHub, and Infrastructure-as-Code (IaC) practices. - Knowledge of Service Control Policies and cloud governance frameworks. - Experience with encryption protocols and key exchange mechanisms (TLS, SSL, Diffie-Hellman, etc. - Exposure to compliance standards such as PCI-DSS, GDPR, HIPAA, ISO 27001, or SOC 2. - Strong documentation and communication skills, with ability to create security playbooks and audit reports. Preferred Qualifications : - Experience in multi-cloud security architecture. - Familiarity with HSMs (Hardware Security Modules) and enterprise-grade cryptographic hardware. - Knowledge of DevSecOps practices for embedding cryptography into CI/CD pipelines. - Background in data protection applications (encryption, tokenization, anonymization). - Security certifications such as CISSP, CCSP, CISM, AWS Security Specialty, Azure Security Engineer, or GIAC GCLD. Key Personal Attributes : - Strong problem-solving and analytical skills. - Ability to work in cross-functional, global teams. - Detail-oriented with a focus on compliance and risk management. - Proactive in identifying security risks and implementing mitigation strategies. (ref:hirist.tech)