> Markdown version of [/jobs/ext/2012211-cyber-data-protection-pki-specialist-senior-consultant](https://www.wearedevelopers.com/jobs/ext/2012211-cyber-data-protection-pki-specialist-senior-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Data Protection/PKI Specialist Senior Consultant

- **Company:** Deloitte T.T.L.
- **Location:** Denver, CO, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Secure Shell (SSH), Client Server Models, Cloud Computing, Cyber Security, Data Security, Key Management, Multi-Purpose Internet Mail Extensions (MIME), Public Key Infrastructure, Systems Integration, SSL Certificate Management, Transport Layer Security, Load Balancing, Kubernetes, Api Gateway
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/cyber-data-protection-pki-specialist-senior-consultant-denver-co-usa-58886592

## About the Role

solutions and architect end-to-end protections * Drive day-to-day project execution, communications, and governance with clients and leadership * Mentor delivery teams and ensure high-quality client-ready deliverables * Track timelines and budgets to ensure on-time, on-scope delivery * Stay current on emerging encryption technologies and industry trends; recommend new tools to enhance data security Tasks * 5+ years in data protection and information security * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years of encryption technologies (PKI, TLS, data/media/file encryption) and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on experience with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert or similar) * 2+ years with cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing, NIST practices) * 2+ years certificate discovery, aaa
hands-on renewal, compliance monitoring * 2+ years supporting strategy, architecture, and implementation workstreams * 2+ years hands-on understanding of integrations with F5, load balancers, WAFs, Kubernetes, API gateways and cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready outputs * Ability to travel 25-50% on average * Professional certifications such as CISSP or CISM Key requirements *

## Description

Experteer Overview As a Senior Consultant in Deloitte's Cyber team, you will advise clients on data protection, encryption, and PKI strategies to mitigate data risks across cloud, on-premises, and hybrid environments. You will design, implement, and operate secure data protection solutions and certificate management programs, while guiding delivery teams and maintaining strong client relationships. You will stay ahead of encryption trends and proactively recommend tools to strengthen cyber postures. This role combines technical leadership with cross-functional collaboration to deliver measurable risk reduction. Compensation / Benefits * Serve as SME and trusted advisor for data protection, encryption, and key management requirements * Design and implement encryption strategies across cloud, on-prem, and hybrid environments * Oversee PKI lifecycle management, certificate health, and secure certificate processes * Lead encryption, data protection, and CLM implementations; evaluate vendor solutions and architect end-to-end protections * Drive day-to-day project execution, communications, and governance with clients and leadership * Mentor delivery teams and ensure high-quality client-ready deliverables * Track timelines and budgets to ensure on-time, on-scope delivery * Stay current on emerging encryption technologies and industry trends; recommend new tools to enhance data security Tasks * 5+ years in data protection and information security * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years of encryption technologies (PKI, TLS, data/media/file encryption) and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on experience with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert or similar) * 2+ years with cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing, NIST practices) * 2+ years certificate discovery, automation, renewal, compliance monitoring * 2+ years supporting strategy, architecture, and implementation workstreams * 2+ years hands-on understanding of integrations with F5, load balancers, WAFs, Kubernetes, API gateways and cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready outputs * Ability to travel 25-50% on average * Professional certifications such as CISSP or CISM Key requirements *


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [20 billion requests a week: Upgrading Twilio's API gateway at scale](https://www.wearedevelopers.com/videos/100234-20-billion-requests-a-week-upgrading-twilio-s-api-gateway-at-scale)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)