Cyber Data Protection/PKI Specialist Senior Consultant

Deloitte T.T.L.
Hartford, CT, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
2 years minimum
Working hours
Regular working hours

Tech stack

Secure Shell (SSH) Cloud Computing Cloud Computing Security Cyber Security Data Discovery Data Security Key Management Multi-Purpose Internet Mail Extensions (MIME) Public Key Infrastructure Transport Layer Security Load Balancing Kubernetes
+1 more
Api Gateway

Job description

Experteer Overview In this role you help clients strengthen data protection and PKI capabilities, guiding encryption, key management, and certificate lifecycle across cloud, on-premises, and hybrid environments. You’ll act as a trusted advisor, shaping encryption strategies and PKI architectures while coordinating cross-functional delivery teams. This position sits at the intersection of technology, governance, and risk, offering meaningful impact through secure data practices. You will stay ahead of evolving cryptography trends and contribute to client success through practical, scalable solutions. Compensation / Benefits * Serve as subject matter expert on data protection, encryption, and secure key management for clients * Design, implement, and operate encryption strategies and PKI architectures across environments * Monitor PKI health and certificate lifecycles to prevent downtime and breaches * Lead project delivery, communicate progress to clients and leadership, and ensure high-quality work products * Track timelines and budgets to enable on-time, on-budget delivery * Stay current on emerging encryption tech (e.g., post-quantum cryptography, confidential computing, secure enclaves) and trends * Evaluate and recommend new tools to enhance data security Tasks * 5+ years in data protection and information security (data discovery, classification, DLP, cloud security, encryption, CLM, etc.) * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management, trust chains * 2+ years implementing encryption technologies and cloud encryption concepts (BYOK, client-side/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert, or similar) * 2+ years with cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing, NIST-aligned) * 2+ years certificate discovery, renewal, and compliance monitoring * 2+ years experience integration with F5, load balancers, WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder mgmt, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Ability to travel 25-50% * Professional certifications such as CISSP, CISM or similar * Limited immigration sponsorship may be available Key requirements *

Requirements

evolving work products * Track timelines and budgets to enable on-time, on-budget delivery * Stay current on emerging encryption tech (e.g., post-quantum cryptography, confidential computing, secure enclaves) and trends * Evaluate and recommend new tools to enhance data security Tasks * 5+ years in data protection and information security (data discovery, classification, DLP, cloud security, encryption, CLM, etc.) * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management, trust chains * 2+ years implementing encryption technologies and cloud encryption concepts (BYOK, client-side/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert, or similar) * 2+ years with cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing, NIST-aligned) * 2+ years certificate discovery, renewal, and compliance monitoring * 2+ years experience integration aa

  • F5, load balancers, WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder mgmt, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Ability to travel 25-50% * Professional certifications such as CISSP, CISM or similar * Limited immigration sponsorship may be available Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · World Congress 2022

1:32 min

Designing a centralized API gateway and identity provider

Axel Barbier · World Congress 2023

4:04 min

Embedding data security and applied ethics into developer education

Daniel Tao +3 · World Congress 2024

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · World Congress 2023

4:04 min

Overview of Kubernetes operators and custom resource definitions

Philipp Krenn · World Congress 2022

Videos

See all

Related articles

See all