Security Architect - Cryptography & HSM

Unique Identification Authority of India (UIDAI)

Bengaluru, Karnataka, India

Position: Security Architect - Cryptography & HSM (Crypto Architect, Band 'F')

Location: UIDAI Technology Centre, Bengaluru | On-site | Full-time

UIDAI operates the world's largest biometric identity platform. The Crypto Architect owns the cryptographic backbone of that platform - key lifecycle, the HSM estate, and the security architecture of the applications built on top of it. This is a hands-on architecture role, not an audit or GRC role.

WHAT YOU WILL DO

1) Cryptographic and Security Architecture

Design and implement enterprise-grade cryptographic architecture - encryption, digital signatures, tokenisation, key derivation and secure protocol design.
Own the HSM architecture end to end: deployment, partitioning, high availability, firmware / FIPS compliance and application integration via PKCS#11, JCE / JCA and KMIP.
Define the key management lifecycle - generation, distribution, rotation, escrow, archival and destruction - with supporting policy and procedure.
Translate security requirements into application-level design, secure prototypes and reusable cryptographic libraries for engineering teams.

2) Secure Engineering and Implementation

Hands-on implementation and code review of cryptographic modules in C, C++, Java, Go or Rust.
Design secure network and application solutions; embed security into the SDLC and CI/CD pipeline.
Drive secure code review, cryptographic validation and remediation of findings.

3) Risk, Threat Modelling and Assurance

Identify threats, vulnerabilities and risks across the IT infrastructure and perform structured threat modelling.
Plan and oversee security testing, VAPT and cryptographic assessments; track findings through to closure.
Maintain security architecture documentation, standards and technical artefacts.

4) Compliance and Governance

Align architecture with ISO/IEC 27001, ITIL, NIST, FIPS 140-2 / 140-3 and UIDAI's information security policy framework.
Support audits, certification and regulatory reviews with evidence and design rationale.

ESSENTIAL QUALIFICATIONS

BE / B.Tech / ME / M.Tech / MS / MCA / M.Sc in Computer Science, IT, Electronics or a related discipline.
Minimum 5 years of experience in IT security, with demonstrable depth in applied cryptography.

ESSENTIAL SKILLS

Excellent understanding of cryptographic algorithms (AES, RSA, ECC, SHA-2 / SHA-3, HMAC, TLS 1.3) with hands-on implementation experience, not theoretical knowledge alone.
Knowledge of HSM architecture including application integration (Thales / Luna, Utimaco, Entrust or equivalent).
Strong programming ability in at least one of: C, C++, Java, Go, Rust.
Sound knowledge of IT security processes and best practices (ITIL, ISO 27001).
PKI, certificate lifecycle management and key management systems.

DESIRABLE

Exposure to large-scale, high-throughput national or BFSI-grade platforms.
CISSP / CISSP-ISSAP / CCSP / CEH or equivalent certification.
Post-quantum cryptography migration planning, secure enclaves or confidential computing.
Familiarity with Aadhaar ecosystem security standards, the UIDAI Information Security Policy or CERT-In guidelines.

PLEASE NOTE: This is a cryptography and information security role. It is NOT a blockchain, cryptocurrency, Web3 or DeFi position.

Engagement is through GA Digital Web Word Pvt Ltd for deployment at UIDAI Technology Centre, Bengaluru.

Score my resume against this job, free →