Cyber Data Protection/PKI Specialist Senior Consultant

Experteer Overview As a Senior Consultant in Deloitte’s Cyber team, you will advise clients on data protection, encryption, and PKI strategies to mitigate data risks across cloud, on-premises, and hybrid environments. You will design, implement, and operate secure data protection solutions and certificate management programs, while guiding delivery teams and maintaining strong client relationships. You will stay ahead of encryption trends and proactively recommend tools to strengthen cyber postures. This role combines technical leadership with cross-functional collaboration to deliver measurable risk reduction. Compensation / Benefits * Serve as SME and trusted advisor for data protection, encryption, and key management requirements * Design and implement encryption strategies across cloud, on-prem, and hybrid environments * Oversee PKI lifecycle management, certificate health, and secure certificate processes * Lead encryption, data protection, and CLM implementations; evaluate vendor solutions and architect end-to-end protections * Drive day-to-day project execution, communications, and governance with clients and leadership * Mentor delivery teams and ensure high-quality client-ready deliverables * Track timelines and budgets to ensure on-time, on-scope delivery * Stay current on emerging encryption technologies and industry trends; recommend new tools to enhance data security Tasks * 5+ years in data protection and information security * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years of encryption technologies (PKI, TLS, data/media/file encryption) and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on experience with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert or similar) * 2+ years with cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing, NIST practices) * 2+ years certificate discovery, automation, renewal, compliance monitoring * 2+ years supporting strategy, architecture, and implementation workstreams * 2+ years hands-on understanding of integrations with F5, load balancers, WAFs, Kubernetes, API gateways and cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready outputs * Ability to travel 25-50% on average * Professional certifications such as CISSP or CISM Key requirements *

solutions and architect end-to-end protections * Drive day-to-day project execution, communications, and governance with clients and leadership * Mentor delivery teams and ensure high-quality client-ready deliverables * Track timelines and budgets to ensure on-time, on-scope delivery * Stay current on emerging encryption technologies and industry trends; recommend new tools to enhance data security Tasks * 5+ years in data protection and information security * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years of encryption technologies (PKI, TLS, data/media/file encryption) and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on experience with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert or similar) * 2+ years with cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing, NIST practices) * 2+ years certificate discovery, aaa hands-on renewal, compliance monitoring * 2+ years supporting strategy, architecture, and implementation workstreams * 2+ years hands-on understanding of integrations with F5, load balancers, WAFs, Kubernetes, API gateways and cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready outputs * Ability to travel 25-50% on average * Professional certifications such as CISSP or CISM Key requirements *