Security Consultant (Thales CipherTrust Manager & Luna HSM (AE

SINEVIS is seeking a Cybersecurity Consultant specializing in Thales Cipher Trust Manager and Thales Luna HSM. This role requires deep technical expertise in encryption, key management, data protection, and security compliance. The ideal candidate will have in-depth knowledge of key management, cryptographic solutions, and the ability to ensure the system meets organisational security and compliance requirements..

Job Responsibilities:

• Designing, implementing and supporting enterprise security solutions utilizing Thales Cipher Trust Data Security Platform.
• Integrating Thales CTM with Microsoft Active Directory (MSAD), PKI (Public Key Infrastructure), implementing a tenant domain concept, and leveraging KMIP (Key Management Interoperability Protocol) and DARE (Data at Rest Encryption).
• Integrations with Thales Data Security Fabric (DSF/ DRI/ FAM).
• Integrate the Cipher Trust Platform with a variety of cloud environments, databases, and applications.
• Administer the creation, distribution, rotation, and revocation of encryption keys in accordance with best practices and compliance requirements.
• Ensure secure storage and backup of encryption keys, employing robust access controls.
• Develop and enforce data security policies through the Cipher Trust Manager
• Troubleshoot and resolve issues related to SQL DB, File level and Storage encryption.
• Develop best practice documentation for the onboarding and integration of application on cryptography solutions.
• Plan, execute, and validate upgrades of Thales Luna HSMs to the latest firmware and software versions.
• Configure Thales Luna HSMs to serve as the root of trust for Public Key Infrastructure (PKI).
  Design and implement integrations of Thales Luna HSMs with Thales CTM (KMS) solutions for secure key generation, storage, and distribution.
• Integrate Thales Luna Hardware Security Modules (HSMs) into PKI, Key Management Systems (KMS)
• Develop scripts and use automation tools to streamline security processes.
• Requires onsite travels.

• Deep understanding of cryptographic protocols, key management schemes, and best practices in encryption
• Hands-on experience on data encrypting using Cipher Trust solutions and integrations with Databases, File Services, Storage.
• Expertise in hardware security modules, cryptographic systems, and secure integrations with enterprise security solutions.
• Preferred certification:
  Professional or Advanced certification on Thales Cipher Trust or Thales HSM solutions
• Good understanding and hands-on of KMIP and TDE integration protocol
• Strong analytical and problem-solving skills.
• Ability to present and discuss technical information to users with varying technical expertise.