Skip to content
Mayank Raj Jaiswal
Enterprise Security Architect

Mayank Raj Jaiswal — Enterprise Security Architect. Building Trust
Through Security.

Enterprise Security Architect specializing in Identity & Access Management, Cybersecurity, Artificial Intelligence, Cloud Security, and Enterprise Software Architecture.

Book a Meeting Explore My Work

15+

Years Experience

5000+

Students Mentored

100+

Sessions Conducted

Ph.D

In Progress

Enterprise Control Domains

OAuth 2.0 / OIDC FIDO2 Passkeys Payment Cryptography PKCS#11 HSMs Zero Trust (mTLS) Knox TrustZone TEE Kubernetes Security DevSecOps (SCA/SAST)
Mayank Raj Jaiswal speaking at a podium
Zero Trust
Cryptographic HSM

Who I Am

Mayank Raj Jaiswal is an Enterprise Security Architect, Researcher, and Speaker with 15+ years of software design expertise spanning global giants like Samsung and Thales.

Enterprise IAM

Designing highly resilient, secure architectures for millions of active identities and transactions at scale.

AI & Cyber Security

Researching the next generation of adaptive, real-time threat intelligence systems driven by Machine Learning.

Technical Leadership

Mentoring engineers, shaping product roadmaps, and advising global clients on regulatory resilience.

Core Philosophy

"Technology evolves rapidly, but trust remains the foundation of every successful digital transaction."

Mayank Raj Jaiswal

Commitment to Excellence

  • Security should never be an afterthought.
  • Architecture should simplify complexity.
  • Technology should empower people.
  • Research should solve practical problems.
  • Knowledge should always be shared.
  • Continuous learning is a professional responsibility.

Professional Experience

Designing secure enterprise systems, leading engineering teams, and delivering trusted digital platforms for over fifteen years.

Thales Group

Senior Technical Lead – Cybersecurity 2017 – Present

At Thales, Mayank has been responsible for designing and leading enterprise-grade cybersecurity solutions used by financial institutions and enterprises worldwide. His work spans Identity & Access Management (IAM), enterprise authentication, FIPS-compliant cryptographic infrastructure, secure digital identity, cloud-native security platforms, and secure software architecture. Instead of simply building software, his role focuses on designing secure platforms that protect digital identities, transactions, and critical enterprise infrastructure in compliance with PCI-DSS and PSD2/PSD3 frameworks.

Architecture & Impact

  • Designed enterprise-grade identity platforms serving millions of global customers.
  • Architected secure, high-integrity authentication frameworks for complex enterprise deployments.

Enterprise Competencies

Enterprise Identity Platforms Authentication & Authorization Identity Lifecycle Management OAuth 2.0 & OpenID Connect JSON Web Tokens (JWT) PKI & Certificate Lifecycle HSM Integration (PKCS#11) FIPS 140-2 & FIPS 140-3 Cryptographic Standards PCI-DSS Compliance Alignment PSD2 & PSD3 Open Banking Security Cloud-Native Security Kubernetes & Docker Security GitLab CI/CD & DevSecOps Secure SDLC & SAST/DAST Threat Modeling & OWASP Top 10 Cyber Resilience Act Readiness Architecture Reviews Technical Leadership Product Strategy Global Banking Solutions
Major Products Delivered: Enrollment & Provisioning Server (EPS) Mobile Secure Messenger (MSM) Secure Provisioning Authority (SPA) IdCloud Enterprise Identity Platform

Samsung Research

Technical Lead 2011 – 2017

At Samsung Research, Mayank worked across multiple large-scale consumer and enterprise products covering Android framework security, Mobile Device Management (MDM), Samsung Knox hardware-backed cryptography, Samsung Pay transaction flows, Firmware Over-The-Air (FOTA) distribution, and automated cloud infrastructure. This phase established strong, hardware-backed foundations in secure operating systems, payment tokenization, and distributed enterprise platforms.

Architecture & Impact

  • Delivered security architecture reviews and patches for multiple mass-market enterprise and consumer products.
  • Integrated EMVCo payment tokenization standards to secure mobile transaction pipelines for Samsung Pay.

Enterprise Competencies

Samsung Knox Security Samsung Pay Security EMVCo Tokenization Standards Samsung Knox Hardware-Backed Cryptography Android Framework Security Mobile Device Management (MDM) Enterprise Mobility Management (EMM) Secure Binary Distribution Deployment Automation Secure Firmware Platforms Firmware Upgrade Security Knox Platform Security Web Browser Engine Security Cloud Infrastructure Services Automated Testing Platforms Continuous Integration & Delivery Performance Optimization

Featured Initiatives

Selected projects spanning enterprise security, identity architecture, IoT research, and cybersecurity education.

Identity & Access Management
Active

AboutIAM

AboutIAM is a long-term initiative dedicated to simplifying modern Identity & Access Management through engineering, research, education, and open collaboration. The vision is to create one of the most comprehensive learning and engineering platforms focused entirely on enterprise identity.

Authentication Authorization OAuth OIDC +7 more
Cyber Awareness

TheCyberNews

TheCyberNews is a cybersecurity awareness initiative focused on simplifying complex security concepts and making cybersecurity knowledge accessible to students, engineers, researchers, and enterprises.

Visit Site (opens in a new tab)
Enterprise Security

Enterprise Identity Platform

Designed enterprise-scale Identity & Access Management solutions supporting secure authentication, authorization, digital onboarding, transaction signing, and enterprise identity lifecycle management.

OAuth OIDC JWT PKI +4 more
Cloud Security

Cloud Native Security

Designed and modernized secure cloud-native platforms using containerized microservices, Kubernetes, secure communication channels, and DevSecOps pipelines.

Platform Architecture

Secure Push Platform

Designed secure notification platforms supporting enterprise authentication workflows using APNS, Firebase Cloud Messaging, and distributed architectures.

Engineering Leadership

DevSecOps Transformation

Led modernization of software delivery pipelines by migrating legacy infrastructure to GitLab CI/CD while integrating automated security scanning and quality gates.

IoT & Embedded

Health Monitoring T-Shirt

Designed and developed an intelligent wearable capable of continuously monitoring health parameters and transmitting secure data for medical analysis. Built for soldiers deployed in remote and extreme-condition areas, sending health parameters back to base camp for rapid response, with a parallel application in remote patient monitoring.

Read Case Study
IoT & Logistics
Case Study

GPS Tracking Platform

One of India's earliest fully in-house GPS-based vehicle and asset tracking systems — PCB layout, circuit design, 3D modelling, firmware, and hardware all designed and assembled locally, end to end.

Read Case Study
Cloud Infrastructure
Case Study

Digital Signage Platform

One of the world's earliest cloud-managed, Raspberry Pi-based digital signage platforms, supporting centralized management of displays deployed across multiple retail, hospitality, and institutional locations under the StarxMedia brand.

Read Case Study Visit Site (opens in a new tab)
IoT & Embedded
Case Study

ZeroTouch Device Family

A family of contactless hardware devices — Sanity Gate, Sanity Thermocheck, a hand sanitizer dispenser, and a zero-touch door key — conceived, designed, and manufactured in-house during the COVID-19 pandemic and deployed at hospitals, temples, and commercial sites.

Read Case Study
Mobile Security
Case Study

Ezio Mobile SDK (OATH OTP)

Security architecture for a mobile SDK that embeds OATH one-time-password authentication in third-party banking and enterprise apps, covering token provisioning, secure defaults, and runtime protections.

OATH OTP Android iOS Windows +1 more
Read Case Study
Mobile Security
Case Study

Firmware Upgrade Security (Samsung Knox)

Firmware update integrity on Samsung devices: delivery and install path, image verification, rollback protection, and post-update validation.

Samsung Knox FOTA / OTA Image Signing Rollback Protection
Read Case Study
IoT & Logistics

Fuel Theft Detection System

Built a theft-detection system prototype for Indian Oil Corporation (IOC) to verify correct fuel volume delivery from delivery fleets at distribution centers.

Embedded Systems IoT Sensors Fleet Monitoring
Industrial Automation

Indian Railways Coach Factory Automation

Contributed to an automation initiative for an Indian Railways coach factory, applying industrial process automation to manufacturing workflows.

Healthcare IT

IIT-K Health-Center Automation

Mentored the development of an automation system for IIT Kanpur's health center, digitizing patient records and clinic workflows.

Mobile Security

Parental Control & Monitoring App

Built a parental control application and device monitoring system deployed by a leading Indian mobile handset manufacturer.

FinTech / Payments

ZepKart

A payments application offering 100% shopping cashback, positioned as a local alternative to NearBuy — covering wallet top-ups, merchant payments, and a rewards passbook.

Mobile Payments Wallet Cashback Rewards
Visit Site (opens in a new tab)
Startup Platform

9Tomato

A platform connecting budding startups with mentorship, guidance, and early-stage funding pathways.

Visit Site (opens in a new tab)
Research

IoT Research

Designed multiple IoT prototypes including industrial automation, connected devices, monitoring platforms, and embedded systems.

Research & Publications

Deep technical expertise focused on advancing the state of enterprise security, digital identity, and artificial intelligence.

Areas of Deep Expertise

Identity & Access Management OAuth 2.0 OpenID Connect PKI Certificate Lifecycle Hardware Security Modules Zero Trust Threat Modeling Cloud Security DevSecOps Secure SDLC AI Security Post Quantum Cryptography Secure Enterprise Architecture Cyber Resilience Digital Identity Mobile Security RASP Mobile SDK Security Firmware Integrity Android Platform Security

Future Research Vision

  • AI Agents for Cybersecurity
  • Enterprise AI Security
  • Identity Intelligence
  • Adaptive Authentication
  • Risk-based Access Control

Featured Publications

Book

Implementing Enterprise Cybersecurity with Open-Source Software and Standard Architecture

A River Publishers title, published in association with IIT Kanpur, covering open-source enterprise cybersecurity implementation and standard reference architecture. Edited by Anand Handa, Rohit Negi, and Sandeep K. Shukla.

River Publishers · 2020

View Publication (opens in a new tab)
Research Paper

IEEE Publications

Published research papers detailing advancements in IoT security, embedded systems, and communication protocols.

IEEE

View Publication (opens in a new tab)
Whitepaper

Enterprise IAM Architecture

Technical whitepapers covering best practices for large-scale Identity and Access Management deployments.

Mobile Security

Securing code that runs on devices the organisation does not control: platform security on Samsung Knox, firmware update integrity, and the mobile SDKs and runtime protections that Thales ships to banks and enterprises.

Samsung Research · 2011 – 2017

Samsung Knox Platform Security

Security work across the Knox platform: the SDK surface that MDM partners consume, the framework layer beneath it, and the review and tooling that kept it safe to ship.

  • Built device-management features on the Knox Standard and Premium SDKs.
  • Worked in platform and framework code, where hardware-backed key protection and container isolation are enforced.
  • Reviewed and fixed security issues in mobile platform components.
  • Built test and automation tooling for security verification.
Android

Samsung Research · 2011 – 2017

Firmware Upgrade Security

Keeping a device trustworthy across over-the-air updates. An image is only as trustworthy as the checks it passes at install time and after reboot.

  • Owned parts of the FOTA / OTA delivery and install path.
  • Image verification and signing checks before an update is applied.
  • Rollback and downgrade protection, so an older, vulnerable image cannot replace a newer one.
  • Post-update validation, confirming the device is in the expected state after an update.
Android
Read the case study

Thales · 2017 – Present

Mobile SDK Security (Ezio / OATH OTP)

The Ezio Mobile SDK embeds OATH one-time-password authentication inside third-party banking and enterprise apps. Because the SDK runs on handsets the issuer does not control, its defaults have to be safe.

  • Token provisioning and storage on the device, so credentials are bound to the app and the platform's secure storage.
  • SDK API design and hardening: secure defaults and guards against common integration mistakes.
  • Security review and threat modelling of the SDK across its life cycle.
  • Runtime protections integrated into the SDK itself, not left to each integrating app.
AndroidiOSWindows
Read the case study

Thales · 2017 – Present

Runtime Application Self-Protection (RASP)

RASP adds runtime defences to a mobile app so that tampering and hostile instrumentation are detected rather than silently trusted. It is one layer of a wider design, not a replacement for one.

  • Anti-debugging and anti-hooking, so attached tools that alter app behaviour are noticed.
  • Anti-tampering and integrity checks on the app and its environment.
  • Environment checks for rooted, jailbroken, or emulated devices.
  • A response policy that is decided by the server and the app's risk model, not by the client alone.
AndroidiOS

How the layers fit together

Each layer assumes the one outside it can fail. No single control is treated as sufficient.

  1. Layer 1 Secure design and minimal trust in the client
  2. Layer 2 Obfuscation and hardening of the binary
  3. Layer 3 RASP signals from the runtime
  4. Layer 4 Server-side verification of every sensitive decision
  5. Layer 5 Attestation of the device and its firmware

Interactive Security Sandbox

Test and visualize standard enterprise-grade security mechanisms. Toggle between simulators below to watch cryptographic assertions and tokens compile in real-time.

WebAuthn Key-Pair Generator

Register a new hardware-backed credential, then sign authentication challenges using public-key cryptography.

Local Device (Client) Secure Connection Relying Party (IDP)
TPM/Key
IDP Server
Ready. Select 'Register Passkey' to begin.
Console Outputs

[SYSTEM] Cryptographic sandbox initialized. WebAuthn and OIDC services are active.

Publications & Insights

Recent Technical Writing

Deep dives into modern cryptographic transitions, federated identity governance, payment security, and secure artificial intelligence pipelines.

View All Articles
Android 3 min read

Firmware Upgrade Trust on Android: Signing, Rollback, and Post-Update Checks

An over-the-air firmware update is only as trustworthy as the checks around it. This post walks through the trust chain from delivery to post-update validation, and how it ties to device attestation.

Oct 18, 2026 Read about Firmware Upgrade Trust on Android: Signing, Rollback, and Post-Update Checks
Mobile Security 3 min read

RASP for Mobile SDKs: What Runtime Self-Protection Does and Does Not Solve

Runtime application self-protection adds detection at the point of use inside a mobile app. This post sets out the categories it covers, why it is bypassable, and how it fits inside a layered design.

Oct 18, 2026 Read about RASP for Mobile SDKs: What Runtime Self-Protection Does and Does Not Solve
AI Security 5 min read

Securing AI Pipelines: Threat Modeling for LLM and Agentic Systems

An engineering-level threat modeling analysis of security vulnerabilities in Large Language Model (LLM) integration, Retrieval-Augmented Generation (RAG) pipelines, and autonomous AI agents, with practical architectural mitigations.

Aug 29, 2026 Read about Securing AI Pipelines: Threat Modeling for LLM and Agentic Systems

Speaking & Community

Sharing knowledge, mentoring engineers, and contributing to the global cybersecurity community.

Technical Mentoring & Impact

5,000+

Students & Engineers Mentored

  • Guided professionals in Cybersecurity, Identity, Cloud Security, and Secure Software Engineering.
  • Conducted comprehensive workshops and technical sessions globally.
  • Active contributor to cybersecurity awareness and NGO education initiatives.
Download Media Press Kit (.ZIP)

Selected Engagements

TheHackersConference

Lead Speaker & Organizing Member

TheHackerNews

Speaker

Google Business Group (GooglePlex)

Speaker

Google Developer Group (GDG)

Speaker

IIT Kanpur

Speaker

Lovely Professional University (LPU)

Speaker

Parul University

Speaker

Metro University

Speaker

Government Polytechnic

Speaker

UPTU Engineering Colleges

Speaker

BMS and other engineering institutions

Speaker

Coding Gurukul

Speaker

Many More...

Speaker

Media & Press

Sharing cybersecurity awareness with the public through television panels, press coverage, and published threat research.

Television

Zee Business

Panel Discussion: QR Code Fraud & Public Wi-Fi Financial Safety

Featured panelist alongside Virag Gupta and anchor Deepak Dobhal, discussing how QR-code scams work and practical steps viewers can take to avoid falling victim, including avoiding financial transactions over public Wi-Fi.

View Coverage (opens in a new tab)
Press

Security Affairs

The Hackers Conference 2013 — Hackers Will Demonstrate Digital Dangers

International security press coverage of The Hackers Conference, where talks on mobile and digital security risks — including Android application backdoors — were presented to a live audience.

View Coverage (opens in a new tab)
Publication

India's First Digital Threat Report

Technical Reviewer

Served as a technical reviewer for India's first Digital Threat Report, contributing subject-matter review on cybersecurity threat trends.

Advisory & Recognition

Advisory roles, internal recognitions, and community contributions across a fifteen-year career.

Security Advisor (Advisory Engagement)

Indian Air Force

Advised officials on security measures to reduce the risk of surveillance and information leakage affecting premises and personnel.

Security Champion

Thales Group

Recognized internally as a Security Champion, a role focused on embedding secure-by-design practices across engineering teams.

Core Member, IAM AI Initiatives

Thales Group

Core contributor to internal initiatives applying AI (including Gemini) to identity and access management security automation.

Advanced Competency Level — Top 7% Organization-Wide

Samsung R&D

Recognized at the Advanced Competency Level, placing in the top 7% of engineers organization-wide.

Training Hardware Contributor, BRiCS

IIT Kanpur

Helped BRiCS (IIT Kanpur) create interactive, easy-to-integrate training hardware for undergraduate students, and mentored students nationally through the IIT Kanpur SIDBI program.

Patent Contributor

Samsung Research

Contributed patentable ideas during tenure at Samsung Research; several were implemented as internal tools or shipped mobile device features.

NGO Education Contributor

Community Initiative

Associated with NGO efforts supporting education for underprivileged children.

Education & Credentials

Formal academic foundations and professional certifications establishing technical authority.

AWS Certified Solutions Architect

Amazon Web Services

AWS Certified Developer

Amazon Web Services

AWS Certified Cloud Practitioner

Amazon Web Services

AWS Certified AI Practitioner

Amazon Web Services

Advanced Cybersecurity Program

IIT Kanpur

Exceptional Performance Award

IIT Kanpur

M.Tech – Software Engineering

BITS Pilani

Ph.D – Artificial Intelligence for Cybersecurity

In Progress

Cryptographically Signed Resume

Verified Professional CV

Download the formal professional history of Mayank Raj Jaiswal. To prevent tampered credential distribution and ensure software-supply-chain integrity, the downloadable PDF is mapped to its active SHA-256 cryptographic check value and detached OpenPGP signature.

Download PDF Resume Download GPG Signature
SHA-256 Verification Fingerprint
8f36c58de3fa83bdc26b77241249b6b907a9fe02720d1c8ebcfd049de3973fa8
PGP Signature Fingerprint
35F2 CD0E A93B B78C ... (Key ID: info@mjaiswal.com)

Professional Timeline

A high-level view of my academic and professional journey.

B.Tech

Computer Science & Engineering

Samsung Research

Started as Engineer, elevated to Technical Lead delivering enterprise mobility and security products.

M.Tech

Software Engineering from BITS Pilani

Thales Group (Gemalto)

Senior Technical Lead focusing on Global Enterprise Identity & Cryptography platforms.

IIT Kanpur

Advanced Cybersecurity Program & Exceptional Performance Award

AboutIAM

Founded platform to simplify modern Identity & Access Management.

AI Security

Focused research into Artificial Intelligence and its intersection with enterprise security.

Future

Ph.D – Artificial Intelligence for Cybersecurity

Let's Build Something
Secure Together

Mayank is highly receptive to keynote speaking invitations, professional security consulting, academic collaborations, or technical leadership discussions. Submit a secure inquiry below.

Email

info@mjaiswal.com

LinkedIn

mayankrajjaiswal

GitHub

mayankrajjaiswal

Operating in compliance with RFC 9116 Security Policies. Cryptographic bug disclosures are welcomed.