Cyber Data Protection/PKI Manager

Deloitte T.T.L.
Charlotte, NC, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Cloud Computing Cyber Security Monitoring of Systems Key Management Public Key Infrastructure Load Balancing Kubernetes Api Gateway

Job description

Experteer Overview In this role you guide clients through data protection and encryption strategy as a trusted advisor, shaping PKI and certificate lifecycle programs across cloud, on-premises, and hybrid environments. You lead architecture and delivery of data protection solutions, ensuring timely, within-budget outcomes while staying ahead of emerging cryptography trends. You work with cross-functional teams to translate security needs into concrete blueprints and execution plans. This position offers impact at scale within Deloitte’s Cyber Strategy & Transformation practice. Compensation / Benefits * Serve as SME and trusted advisor on data protection and encryption requirements * Advise on encryption, decryption, secure key management, and PKI strategies across environments * Design, implement, and operate data protection solutions (certificate lifecycle, infrastructure monitoring) * Drive day-to-day engagement execution: status updates, supporting delivery teams, tracking timelines * Stay current on encryption technologies and industry trends; evaluate and recommend tools * Lead technical workstreams and mentor junior practitioners * Translate business and security requirements into architecture blueprints and implementation plans * Manage governance, risk, dependencies, and QA for enterprise security transformations * Travel 25-50% as needed to serve clients Tasks * Bachelor’s degree in relevant field and 7+ years in data protection and information security * 7+ years PKI architecture and enterprise trust models * 5+ years leading certificate lifecycle management (AppViewX, Venafi, Keyfactor, DigiCert) or similar * Advanced knowledge of cryptography, certificate lifecycle, key management, HSM integration, crypto policy enforcement * Hands-on experience with certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud and web/app servers * Experience leading discovery, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, and workshop facilitation * Ability to travel; offshore/onshore team leadership * Ability to translate requirements into architecture blueprints and deployment plans * Delivery governance, risk management, dependencies, and QA for enterprise security transformations Key requirements *

Requirements

& * Stay current on encryption technologies and industry trends; evaluate and recommend tools * Lead technical workstreams and mentor junior practitioners * Translate business and security requirements into architecture blueprints and implementation plans * Manage governance, risk, dependencies, and QA for enterprise security transformations * Travel 25-50% as needed to serve clients Tasks * Bachelor’s degree in relevant field and 7+ years in data protection and information security * 7+ years PKI architecture and enterprise trust models * 5+ years leading certificate lifecycle management (AppViewX, Venafi, Keyfactor, DigiCert) or similar * Advanced knowledge of cryptography, certificate lifecycle, key management, HSM integration, crypto policy enforcement * Hands-on experience with certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud and web/app servers * Experience leading discovery, remediation, renewal automation, and compliance monitoring programs * a aaaz_ client leadership, executive stakeholder management, and workshop facilitation * Ability to travel; offshore/onshore team leadership * Ability to translate requirements into architecture blueprints and deployment plans * Delivery governance, risk management, dependencies, and QA for enterprise security transformations Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · WWC 2023

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · WWC 2022

1:32 min

Designing a centralized API gateway and identity provider

Axel Barbier · WWC 2023

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:04 min

Overview of Kubernetes operators and custom resource definitions

Philipp Krenn · WWC 2022

Videos

See all

Related articles

See all