Cyber Data Protection/PKI Specialist Senior Consultant

Deloitte T.T.L.
McLean, VA, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
2 years minimum
Working hours
Regular working hours

Tech stack

Secure Shell (SSH) Client Server Models Cloud Computing Cloud Computing Security Cyber Security Databases Data Discovery Data Security Identity and Access Management Key Management Multi-Purpose Internet Mail Extensions (MIME) Public Key Infrastructure
+5 more
Systems Integration Transport Layer Security Load Balancing Kubernetes Api Gateway

Job description

Experteer Overview You will be a senior consultant driving data protection and PKI solutions for clients. In collaboration with cross-functional teams, you design and operate encryption strategies to protect sensitive data across cloud, on-premises, and hybrid environments. You will lead delivery, guide architecture decisions, and stay current on encryption tech and data-risk trends. Your work shapes secure data management and certificate lifecycles for resilient client ecosystems, enabling trust and regulatory alignment. Compensation / Benefits * Serve as SME and trusted advisor on data protection, encryption, and key management * Design, implement and operate data protection and PKI solutions across cloud, on-prem, and hybrid environments * Lead encryption strategy development and certificate lifecycle management; monitor certificate infrastructures to prevent downtime * Drive day-to-day project execution, communicate updates to clients and firm leadership, and ensure high-quality deliverables * Track project timelines and ensure on-time, on-budget delivery * Stay informed on emerging encryption technologies and industry trends; evaluate and recommend new tools and solutions * Collaborate with delivery teams to ensure customer-centric outcomes * Support strategy, architecture, roadmaps, and implementation workstreams * Engage in client-facing activities: requirements gathering, stakeholder management, workshops, executive communication * Lead small teams/workstreams and produce client-ready deliverables * Travel 25-50% depending on client needs Tasks * 5+ years in data protection and information security, including data discovery, classification, access governance, DLP, cloud security, encryption, CLM, and TLS * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management, trust chains * 2+ years implementing encryption technologies (e.g., database/file encryption, PKI, CLM, TLS) and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps and frameworks * 2+ years hands-on experience with one or more data protection technologies * 2+ years with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert, or similar) * 2+ years with cryptographic standards and protocols (TLS/SSL, SSH, S/MIME, code signing, NIST) * 2+ years certificate discovery, inventory, automation, renewal, monitoring * 2+ years supporting strategy, architecture, and implementation workstreams * 2+ years understanding integrations with F5, load balancers, WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing: requirements gathering, stakeholder management, workshop facilitation, executive communication * 2+ years leading small teams/workstreams and producing client-ready deliverables * Ability to travel 25-50% * Professional certifications such as CISSP or CISM Key requirements *

Requirements

2026-09-09 * Track project timelines and ensure on-time, on-budget delivery * Stay informed on emerging encryption technologies and industry trends; evaluate and recommend new tools and solutions * Collaborate with delivery teams to ensure customer-centric outcomes * Support strategy, architecture, roadmaps, and implementation workstreams * Engage in client-facing activities: requirements gathering, stakeholder management, workshops, executive communication * Lead small teams/workstreams and produce client-ready deliverables * Travel 25-50% depending on client needs Tasks * 5+ years in data protection and information security, including data discovery, classification, access governance, DLP, cloud security, encryption, CLM, and TLS * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management, trust chains * 2+ years implementing encryption technologies (e.g., database/file encryption, PKI, CLM, TLS) and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps and frameworks * 2+ years hands-on experience with one or more data protection technologies * 2+ years with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert, or similar) * 2+ years with cryptographic standards and protocols (TLS/SSL, SSH, S/MIME, code signing, NIST) * 2+ years certificate discovery, inventory, automation, renewal, monitoring * 2+ years supporting strategy, architecture, and implementation workstreams * 2+ years understanding integrations with F5, load balancers, WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing: requirements gathering, stakeholder management, workshop facilitation, executive communication * 2+ years leading small teams/workstreams and producing client-ready deliverables * Ability to travel 25-50% * Professional certifications such as CISSP or CISM Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

3:04 min

Database evolution and the funding behind vector databases

Erik Bamberg · LIVE

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · World Congress 2022

1:32 min

Designing a centralized API gateway and identity provider

Axel Barbier · World Congress 2023

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · World Congress 2023

4:01 min

Managing application isolation via pluggable database models

Wei Hu Wei Hu · World Congress 2022

Videos

See all

Related articles

See all