Duration: 1 year extendable contract
Location : Kuala Lumpur/Malaysia
Position : Cryptography DBA
Job Description:
Primary Skills:
- Oracle/MSSQL DB/PGSQL DB/Elastic DB knowledge
- Backup, recovery, patch management
- Monitoring
- Troubleshoot database, encryption and connectivity issues
- Access Control & privileged account security on database
- Database incident response
Secondary Skills:
- Encryption key lifecycle management
- Hardware security module (HSM) knowledge
- Thales/Fortanix/Protegrity knowledge
- Providing 24 x 7 supports for security in production systems as necessary to proactively protect the integrity, confidentiality, and availability of information of the company.
- Take End to End ownership of Technology incidents and Requests to resolve them within agreed objectives and to the satisfaction of customers.
- Ensure customer satisfaction through improved service and quality. All escalation timely responded and closed.
- Support enterprise key management systems and encryption platforms
- Monitor database health, performance, and availability
- Manage encryption keys lifecycle including generation, rotation, archival, and revocation
- Support Hardware Security Modules (HSM) and cryptographic services
- Perform database backup, recovery, and patch management activities
- Troubleshoot database, encryption, and connectivity issues
- Maintain access controls and privileged account security
- Ensure compliance with security policies, audit requirements, and regulatory standards
- Support Database incident response and root cause analysis for security-related events
- Prepare operational reports, risk findings, and remediation updates
- Work with application teams during onboarding and migration activities
- Maintain documentation, SOPs, and technical runbooks
- Support disaster recovery and business continuity testing
- Provide advanced technical support (Tier 2/3) for Thales CipherTrust, Fortanix SDKMS, Thales Vormetric, and Protegrity Data Security platforms in production environments.
- Manage and maintain enterprise Key Management Systems (KMS) and Tokenization Services.
- Perform encryption key lifecycle operations (Key generation, key rotation, key expiration, archival) ensuring compliance with security policies.
- Work closely with internal CaaS onboarding teams/BAU team/PSS infra teams/ Cloud teams to integrate and support data encryption strategies.
- Onboarding applications in Thales/Fortanix/Protegrity according to the business requirement in the Production environment to deliver the Encryption, Key management and Tokenization services across the bank.
- Troubleshooting issues related to key access, encryption/decryption failures, and integration with applications (e.g. Oracle, MSSQL DB, PGSQL DB, Elastic DB, vSAN/Netapp/PowerTech/Hitachi storages).
- Lead or participate in security audits, risk assessments, and compliance reporting.
- Document processes, standard operating procedures (SOPs), and maintain detailed support runbooks.
- Mentor junior engineers and provide training to internal teams on best practices for key management and tokenization.