Cryptography-DBA_T&M

Primary Skills:

• Oracle/MSSQL DB/PGSQL DB/Elastic DB knowledge

• Backup, recovery, patch management

• Monitoring

• Troubleshoot database, encryption and connectivity issues

• Access Control & privileged account security on database

• Database incident response

Secondary Skills:

• Encryption key lifecycle management

• Hardware security module (HSM) knowledge

• Thales/Fortanix/Protegrity knowledge

• Documentation

JD

• Providing 24 x 7 supports for security in production systems as necessary to proactively protect the integrity, confidentiality, and availability of information of the company.

• Take End to End ownership of Technology incidents and Requests to resolve them within agreed objectives and to the satisfaction of customers.

• Ensure customer satisfaction through improved service and quality. All escalation timely responded and closed.

·    Support enterprise key management systems and encryption platforms

·    Monitor database health, performance, and availability

·    Manage encryption keys lifecycle including generation, rotation, archival, and revocation

·    Support Hardware Security Modules (HSM) and cryptographic services

·    Perform database backup, recovery, and patch management activities

·    Troubleshoot database, encryption, and connectivity issues

·    Maintain access controls and privileged account security

·    Ensure compliance with security policies, audit requirements, and regulatory standards

·    Support Database incident response and root cause analysis for security-related events

·    Prepare operational reports, risk findings, and remediation updates

·    Work with application teams during onboarding and migration activities

·    Maintain documentation, SOPs, and technical runbooks

·    Support disaster recovery and business continuity testing

·    Provide advanced technical support (Tier 2/3) for Thales CipherTrust, Fortanix SDKMS, Thales Vormetric, and Protegrity Data Security platforms in production environments.

·    Manage and maintain enterprise Key Management Systems (KMS) and Tokenization Services.

·    Perform encryption key lifecycle operations (Key generation, key rotation, key expiration, archival) ensuring compliance with security policies.

·    Work closely with internal CaaS onboarding teams/BAU team/PSS infra teams/ Cloud teams to integrate and support data encryption strategies.

·    Onboarding applications in Thales/Fortanix/Protegrity according to the business requirement in the Production environment to deliver the Encryption, Key management and Tokenization services across the bank.

·    Troubleshooting issues related to key access, encryption/decryption failures, and integration with applications (e.g. Oracle, MSSQL DB, PGSQL DB, Elastic DB, vSAN/Netapp/PowerTech/Hitachi storages).

·    Lead or participate in security audits, risk assessments, and compliance reporting.

·    Document processes, standard operating procedures (SOPs), and maintain detailed support runbooks.

·    Mentor junior engineers and provide training to internal teams on best practices for key management and tokenization.