Cloud Data Encryption and Cryptography Automation Expert

The Security Services team at ITO, Ford Business Solutions, India is seeking a passionate and creative Cloud Data Encryption and Cryptography Automation Expert who can build and maintain critical security tools used to protect Ford’s most sensitive security systems. The interested candidate should have experience in Public Key Infrastructure (PKI), Certificate Management, key management, EKCM, cryptography, data encryption and managing SaaS platforms such as Venafi, Cloud KMS as well as cloud computing (GCP, AWS, Azure), and automation.

YOUR TYPICAL DAY HERE WOULD BE:

• Automate and orchestrate certificate management using Venafi
• Collaborate with Platform vendors to coordinate distribution of regular updates/patches to clients and platform.
• Test and implement vendor product upgrades.
• Utilize GCP Cloud services, including KMS and ReCaptcha security services, to implement robust encryption, key management, and application security solutions
• Act as an advocate and liaison with Cyber Défense analysts to understand their requirements and use cases, and to design, develop, and automate security solutions.
• Work with application teams to adopt and modernize data security.
• Manage nCipher HSM for key management, ensuring the security and integrity of cryptographic keys.
• Automate repeatable tasks and workflows to improve process efficiency by developing APIs/scripts and deploying to the cloud.
• Implement SRE for Platform services, capabilities/features to achieve availability and reliability. 
• Implement ZeroTrust capabilities across all device pillars to reduce and maintain non-compliance devices.
• Research and evaluate new security technologies and make recommendations for implementation.
• Stay up-to-date on the latest security trends and developments and maintain a high level of technical expertise in the field of endpoint security.

WHAT YOUR SKILLSET LOOKS LIKE:

• A relevant Bachelor’s or Master’s Degree in engineering/computer applications
• 3+ years of experience as a Security Engineer with a focus on using tools like Venafi, Cloud KMS
• Experience in design and implementation of Windows Active Directory Certificate Services, CAs (both root and enterprise CAs).
• Experience in configuring Online Responder service (OCSP) and Certificate Revocation List (CRL) servers.
• Experience in working with external CAs like DigiCert, GlobalSign etc.
• 1+ years of experience in application/API development (Python Flask or FastAPI or Java or Node JS)
• Basic experience in JavaScript, HTML5,CSS, etc.
• Knowledge of GCP or Azure or AWS and configuring infrastructure using infrastructure-as-a-code libraries like Terraform, Ansible, etc.
• Experience working in an Agile development environment
• Understanding of Dev(Sec)Ops best practices highly advantageous
• In-depth knowledge of cybersecurity principles, practices, and technologies.
• Strong communication skills
• The courage to promise and commitment to deliver, whatever it takes. Keen attention to detail.
• Pro-active, independent, resourceful, able to work in a team environment and work independently with minimal supervision
• Positive and passionate personality, with a zest for life outside of work (we truly mean it. And measure it too!)
   

WOULD BE GREAT IF YOU ALSO BRING:

• Security Certifications:
  • Certified Information Systems Security Professional (CISSP) or 
  • Venafi Security Administrator or
  • GCP: Professional Cloud Security Engineer