Cyber Data Protection/PKI Manager

Deloitte T.T.L.
Austin, TX, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Cloud Computing Cloud Computing Security Cyber Security Data Discovery Information Leak Prevention Monitoring of Systems Key Management Public Key Infrastructure Load Balancing Kubernetes Api Gateway

Job description

Experteer Overview In this role you drive cyber strategy and transformation engagements for clients, acting as a trusted advisor on data protection and encryption. You will shape PKI and encryption programs across cloud, on-prem, and hybrid environments, aligning with clients’ regulatory and risk needs. You lead design, deployment, and governance of data protection solutions while guiding delivery teams and maintaining momentum. The opportunity centers on strengthening client cyber postures and delivering measurable security outcomes. Compensation / Benefits * Serve as SME and trusted advisor on data protection and encryption requirements * Advise on encryption, decryption, secure key management, and PKI strategies across multi-environment landscapes * Design, implement, and operate data protection tech and processes (certificate lifecycle management, infrastructure monitoring) * Lead day-to-day engagement execution, communicate progress to clients and leadership, and track timelines for on-time/on-budget delivery * Stay current with encryption technologies and industry trends to evaluate and recommend security tools Tasks * 7+ years in data protection and information security (data discovery/classification, rights management, data loss prevention, cloud security, encryption, certificate lifecycle management) * 7+ years PKI architecture expertise and enterprise trust models * 5+ years leading CLM strategy, design, and implementation (AppViewX, Venafi, Keyfactor, DigiCert or similar) * Advanced knowledge of cryptography, certificate lifecycle, key management, HSM integration, and crypto policy enforcement * Hands-on certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud, web/app servers, and network/security infra * Experience leading discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, workshop facilitation, and roadmap alignment * Ability to travel 25-50% * Strong mentoring capability * Ability to translate business, operational, and security requirements into architecture blueprints and implementation plans Key requirements *

Requirements

  • on-time/on-budget delivery * Stay current with encryption technologies and industry trends to evaluate and recommend security tools Tasks * 7+ years in data protection and information security (data discovery/classification, rights management, data loss prevention, cloud security, encryption, certificate lifecycle management) * 7+ years PKI architecture expertise and enterprise trust models * 5+ years leading CLM strategy, design, and implementation (AppViewX, Venafi, Keyfactor, DigiCert or similar) * Advanced knowledge of cryptography, certificate lifecycle, key management, HSM integration, and crypto policy enforcement * Hands-on certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud, web/app servers, and network/security infra * Experience leading discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, workshop facilitation, and roadmap alignment
  • Ability to travel 25-50% * Strong mentoring capability * Ability to translate business, operational, and security requirements into architecture blueprints and implementation plans Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · WWC 2023

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · WWC 2022

1:32 min

Designing a centralized API gateway and identity provider

Axel Barbier · WWC 2023

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:04 min

Overview of Kubernetes operators and custom resource definitions

Philipp Krenn · WWC 2022

Videos

See all

Related articles

See all