12+ years of proven strategic Enterprise Security architecture experience involving Design,Implementation & Operational experience in Data Security & Cryptographic Solutions with astrong understanding and knowledge of Encryption/Decryption and Data Security, PKI, andsecurity and compliance regulations such as PCI DSS, SOC 2, ISO 27001, HIPPA, NISTPublic Key Infrastructure ( PKI ) - CAs, CRLs, OCSP, Venafi, Keyfactor, Entrust, Certificate CSRsHardware Security Module ( HSM ) - Safenet & ThalesEncryption & Key Management products - Gemalto KeySecure (SafeNet ), Vormetric DSMsExternal Certificate management - DigiCert, EntrustPrivileged Identity Management solutions (PIM/PAM) - Cyberark, Enterprise Digital Vault,PowerBrokerOverview:● Provided Key Management Solution as a Service (KMSaaS) to offload Key Management,Encryption/Decryption offloading, and HSM as a Root of Trust● Demonstrated and proven ability to utilize HSMs, Key Management Solutions (KMS), andCloud KMS effectively solves the requirements of Encryption, Tokenization, and Keys● Advanced configurations and customizations of Thales key Management solutions● Oversaw PKI operations, including certificate issuance (CSRs), renewal, and revocation (CRLs)with OCSP protocol with PKI technologies including Digital Certificates, CertificateAuthorities (CAs), and Hardware Security Modules (HSMs)● Led the Data Security Managers to CipherTrust Managers migration project● Participate in creating and maintaining Information Security documents such as policies,standards, baselines, guidelines, and procedures● Perform Quarterly audits of Encryptions Services owned security devices like DSMs, HSMs,and Keysecures● Perform POC for upcoming security devices like CipherTrust Managers● Baseline compliance and Standard Compliance reporting like GDPR, GLBA, ISO/IEC27001,NIST 800-41, NIST 800-53, PCI-DSS v3.2.1, and SOX using AlgoSec security management suite● Manage AlgoSec security suite and audit Firewall rules based on security rating score,redundancy and security level in scope, Update AlgoSec to reflect current network topology● Participate in the planning and design of enterprise platform security architecture, under thethe direction of the CIO, Cybersecurity● Crypto Management and Data Security Principle Engineer, helping with troubleshooting andfixing the problems related to DSMs/HSMs and leading the technical support team● Deployment and the Integration of new Crypto management solutions and enhancements ofexisting solutions per defined crypto standards