Senior Security Infrastructure Engineer; HSM​/KMS

Position: Senior Security Infrastructure Engineer (HSM/KMS)
Location: Bengaluru

Company Description
Qnu Labs is India's pioneer in quantum cryptography, offering the only commercially ready quantum-safe security products in the country. We are a global leader in data security, protecting critical information against the immense threats posed by the quantum computing era. Our excellence has been recognized with the Defence Innovation Award (2023) and the National Technology Award (2022).

We are building Qshield, a full-stack quantum safe security platform that combines advanced cryptography, quantum-grade hardware, and a robust integration layer. Qshield helps enterprises, defense organizations, and critical infrastructure operators seamlessly adopt quantum-safe technologies while maintaining crypto-agility. Join us to work with some of the best engineers and physicists in the world as we build the cryptographic infrastructure of the future.

Objective
We are looking for a hands-on  Security Infrastructure Engineer  to operate and deploy our Key Management System (KMS). Your job is simple but critical: you will set up, configure, and maintain the cryptographic infrastructure that protects our customers' data. You will be the primary technical operator ensuring our KMS and Confidential Computing environments are up, running, and integrated correctly.

Key Responsibilities
Deploy & Configure:  Install and configure our KMS solution on Linux servers (bare metal or virtualized). Ensure services start correctly and talk to the hardware (HSM/SGX).
Customer Integration:  Connect the KMS to client applications using standard protocols like  KMIP  and  PKCS#11 .
Key Management Operations:  Handle day-to-day key lifecycle tasks: generating keys, rotating them, and revoking them according to policy.
PKI Administration:  manage internal Certificates (X.509). Generate CSRs, install certificates, and fix expiration/trust issues.
Maintenance & Troubleshooting:  Monitor system health, patch the Linux OS, and troubleshoot connectivity issues (firewalls, mTLS errors) when the KMS isn't reachable.

Must-Have Skills
Linux Administration:  You must be comfortable with the Linux command line. You know how to check logs (journalctl), manage services (systemd), and check network ports (netstat/ss).
KMS

Experience:

You have operated enterprise KMS tools before (e.g., Hashi Corp Vault, Thales, Fortanix). You understand what a KMS does.
PKI & Certs:  You can use openssl to check if a certificate is valid or why a connection is failing. You understand mTLS.
Basic Cryptography:  You know the difference between a Public Key and a Private Key, and what an HSM is used for.

Nice to Have

Experience with  Confidential Computing  hardware (Intel SGX or AMD SEV).

Experience with  Docker/Containers  (spinning up the KMS as a container).
Scripting (Bash) to automate daily backup or health-check tasks.