Domain Specialist – Thales Data Security Products (HSM, HSE, CTM & payShield)

Company Description Skyform Technologies India Pvt Ltd is a technology solutions and services provider specializing in advanced IT infrastructure, security, and enterprise platforms. The organization focuses on delivering secure, scalable, and high-performance solutions to clients across financial services, telecommunications, and other regulated industries. Skyform is committed to innovation, client-centric delivery, and strong technical expertise, creating an environment where specialists can work on complex, mission-critical systems. Team members benefit from exposure to global projects, modern technologies, and continuous professional development opportunities. The company values collaboration, integrity, and a strong security-first mindset in all its engagements. Location Bangalore, India (base) — travel to Oman & UAE on project-need basis Overall Experience 8 – 10 years Domain Experience 5 – 8 years (hands-on, on the specified Thales products) Employment Type Full-time Certifications HSM, HSE, CTM & payShield certifications — MUST HAVE Role Overview We are seeking a Domain Specialist with deep, hands-on expertise across the full lifecycle — Assess, Design, Deploy (Implement), and Operate — of Thales data protection and payment security products, specifically Hardware Security Modules (HSM), High Speed Encryptors (HSE), and payShield payment HSMs. The successful candidate will act as the technical authority for customer engagements: assessing the security and compliance landscape, designing robust cryptographic architectures, leading implementations, and supporting steady-state operations. This is a customer-facing, delivery-oriented role that combines strong engineering depth with a consultative mindset. The candidate will be based out of our Bangalore office during non-project periods and will travel to Oman and the UAE as project needs demand.Key ResponsibilitiesAssess • Engage with customers to understand business drivers, security posture, and regulatory obligations. • Conduct current-state assessments of key management, encryption, and payment security environments. • Map requirements to applicable compliance standards (PCI DSS, PCI PIN, PCI HSM, PCI P2PE, GDPR, and data localization/residency mandates relevant to India, Oman, and the UAE). • Perform gap analyses and produce assessment reports with clear, prioritized recommendations.Design • Architect end-to-end cryptographic and key management solutions built on Thales HSM, HSE, and payShield. • Define HSM partitioning, key ceremonies, key hierarchies, and secure key lifecycle management. • Design network encryption topologies using Thales High Speed Encryptors (Layer 2 / Layer 3 / Layer 4 as applicable). • Design payment security flows on payShield (PIN translation/generation, EMV, key management, tokenization, P2PE, host command customization). • Produce High-Level and Low-Level Design (HLD/LLD) documents, including resiliency considerations (HA/DR, backup, disaster recovery).Deploy / Implement • Install, configure, and integrate Thales HSM, HSE, and payShield appliances into customer environments. • Execute secure key ceremonies and manage the full key lifecycle in line with compliance and audit requirements. • Perform functional and security testing, cutover, and go-live support. • Prepare and hand over as-built documentation, runbooks, and operational procedures.Operate • Provide L2/L3 operational support, troubleshooting, and root-cause analysis for deployed Thales products. • Manage firmware upgrades, patching, health monitoring, and periodic key rotation. • Support audits and compliance reviews with evidence and technical guidance. • Contribute to continuous improvement of operational and delivery best practices. Integration Experience (Required) Proven, hands-on experience integrating Thales HSM, HSE, and payShield with the surrounding enterprise ecosystem, including: • Databases: Oracle, Microsoft SQL Server, and other enterprise databases (TDE, column/tablespace encryption, key management integration). • File servers: secure integration with file/storage servers and encryption of data at rest. • Network equipment: switches, firewalls, and Application Delivery Controllers (ADC / load balancers) — including encryptor placement and network topology considerations. • Cloud key management: Azure Key Vault / Managed HSM, AWS KMS / CloudHSM, and Oracle Cloud Infrastructure (OCI) key management, in cloud and hybrid deployments. • Standards & interfaces: PKCS#11, JCE/JCA, KMIP, REST APIs, and PKI integration. Required Qualifications & Experience • Overall experience: 8 – 10 years in information / data security or related engineering roles. • Domain experience: 5 – 8 years of dedicated, hands-on experience implementing the specified Thales products — HSM (e.g., Luna Network HSM), High Speed Encryptors (HSE), and payShield payment HSMs. • Certifications (must have): valid product certifications for HSM, HSE, and payShield. • Bachelor's degree in Computer Science, Engineering, Information Security, or a related field (or equivalent practical experience). • Deep, demonstrable understanding of data security and compliance requirements, including PCI DSS, PCI PIN, PCI HSM, PCI P2PE, key management standards, and regional data protection / residency regulations. • Strong grasp of applied cryptography: symmetric/asymmetric encryption, key management, digital signatures, PKI, and TLS/network encryption. • Proven delivery across the full Assess → Design → Implement → Operate lifecycle in customer-facing engagements. Travel & Location Requirements • Willingness and readiness to travel to Oman and the UAE on a project-need basis, potentially for extended on-site engagements. • Valid passport and eligibility to obtain the required work / travel visas for the Middle East region. • Based at the Bangalore office between projects and during non-travel periods. Desirable Attributes & Growth Mindset We place a high value on curiosity and continuous learning. The ideal candidate is: • Keen to learn emerging security domains, including Post-Quantum Cryptography (PQC) and crypto-agility, and eager to help customers prepare for quantum-safe migration. • Interested in AI Security frameworks and the intersection of AI, data protection, and governance. • Open to picking up new technology stacks as required for a project — with the understanding that structured training and enablement will be provided. • A self-starter who can also mentor peers and share knowledge across the team.Good to Have • Additional security certifications (CISSP, CISM, CCSP, or equivalent). • Scripting / automation skills (Python, Bash, PowerShell) and familiarity with DevSecOps practices. • Prior delivery experience in the Middle East (Oman / UAE) region. What We Offer • Structured training and enablement on new technologies and tech stacks. • Exposure to cutting-edge security domains such as Post-Quantum Cryptography and AI Security. • Challenging, high-impact customer engagements across India and the Middle East. • A collaborative environment that rewards curiosity, ownership, and continuous growth. .