Cyber Data Protection/PKI Manager

Deloitte T.T.L.
Arlington, VA, United States
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Cloud Computing Cyber Security Data Security Key Management Public Key Infrastructure Load Balancing Kubernetes Api Gateway

Job description

Experteer Overview In this role you will act as a trusted advisor on data protection and encryption strategies, guiding clients across cloud, on-premises, and hybrid environments. You will design and operate solutions that reduce data risk, lead engagement delivery, and stay ahead of emerging encryption technologies. You’ll work with cross-functional teams to ensure on-time, on-budget outcomes while strengthening clients’ cyber posture. This is a strategic, client-facing role at Deloitte’s Cyber Strategy & Transformation team, focused on data protection and governance. Compensation / Benefits * Serve as subject matter expert on data protection and encryption requirements * Advise on encryption, decryption, secure key management, and PKI strategies across environments * Design, implement, and operate data protection solutions including certificate lifecycle management * Manage day-to-day engagement execution and communicate progress to clients and leadership * Stay current on encryption technologies and recommend tools to strengthen data security Tasks * Bachelor’s degree in a related field * 7+ years in data protection and information security roles * 7+ years with PKI concepts and enterprise trust models * 5+ years leading certificate lifecycle management (CLM) initiatives using platforms like AppViewX, Venafi, Keyfactor, DigiCert * Advanced knowledge of cryptography, certificate lifecycles, key management, HSM integration, and policy enforcement * Hands-on experience with certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud and web/app servers * Experience leading discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, and workshop facilitation * Ability to lead technical workstreams and coordinate offshore/onshore teams * Ability to translate business and security requirements into architecture and implementation plans * Knowledge of delivery governance, risk management, dependencies, and QA for enterprise security transformations * Willingness to travel 25-50% Key requirements *

Requirements

and technologies and recommend tools to strengthen data security Tasks * Bachelor’s degree in a related field * 7+ years in data protection and information security roles * 7+ years with PKI concepts and enterprise trust models * 5+ years leading certificate lifecycle management (CLM) initiatives using platforms like AppViewX, Venafi, Keyfactor, DigiCert * Advanced knowledge of cryptography, certificate lifecycles, key management, HSM integration, and policy enforcement * Hands-on experience with certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud and web/app servers * Experience leading discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, and workshop facilitation * Ability to lead technical workstreams and coordinate offshore/onshore teams * Ability to translate business and security requirements into architecture and implementation plans * Knowledge of delivery governance, risk management, dependencies, and QA for enterprise security transformations * Willingness to travel 25-50% Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · WWC 2022

1:32 min

Designing a centralized API gateway and identity provider

Axel Barbier · WWC 2023

4:04 min

Embedding data security and applied ethics into developer education

Daniel Tao +3 · WWC 2024

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · WWC 2023

4:04 min

Overview of Kubernetes operators and custom resource definitions

Philipp Krenn · WWC 2022

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

Videos

See all

Related articles

See all