Cyber Data Protection/PKI Specialist Senior Consultant

Experteer Overview In this role, you apply deep expertise in data protection and PKI to help clients manage encryption, key management, and certificate lifecycles across cloud, on-premises, and hybrid environments. You work closely with cross-functional teams to design and operate encryption strategies, assess data risks, and ensure robust PKI governance. You stay ahead of evolving cryptography trends and propose practical tools and approaches to improve client security posture. This role offers impact by shaping secure data handling practices for diverse clients within Deloitte’s Cyber Strategy & Transformation practice. Compensation / Benefits * Act as SME and trusted advisor on data protection, encryption requirements, and secure key management * Design, implement and operate data protection and encryption solutions across environments; manage PKI lifecycle and certificate health * Lead delivery on engagements, manage timelines and coordinate with clients and leadership * Stay current on encryption technologies (e.g., post-quantum crypto, confidential computing) and industry trends; recommend new tools * Support strategy, architecture, roadmaps, and implementation workstreams related to data protection and cryptography Tasks * Bachelor’s degree in relevant field * 5+ years in data protection and information security (data discovery, classification, DLP, cloud security, encryption) * 5+ years PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years implementing encryption technologies and CLM; cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on experience with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert) * 2+ years with TLS/SSL, SSH, S/MIME, code signing; familiarity with NIST practices * 2+ years certificate discovery, inventory, automation, renewal, compliance monitoring * 2+ years supporting strategy, architecture, and delivery workstreams * 2+ years integrating with F5, load balancers, WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing skills (requirements, stakeholder mgmt, workshop facilitation, executive comms) * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Ability to travel 25-50% * CISSP/CISM or similar certification preferred * Limited immigration sponsorship may be available Key requirements *

• on encryption technologies (e.g., post-quantum crypto, confidential computing) and industry trends; recommend new tools * Support strategy, architecture, roadmaps, and implementation workstreams related to data protection and cryptography Tasks * Bachelor’s degree in relevant field * 5+ years in data protection and information security (data discovery, classification, DLP, cloud security, encryption) * 5+ years PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years implementing encryption technologies and CLM; cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies, roadmaps, and frameworks * 2+ years hands-on experience with CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert) * 2+ years with TLS/SSL, SSH, S/MIME, code signing; familiarity with NIST practices * 2+ years certificate discovery, inventory, automation, renewal, compliance monitoring * 2+ years supporting strategy, architecture, and delivery aaaaaaa data * 2+ years integrating with F5, load balancers, WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing skills (requirements, stakeholder mgmt, workshop facilitation, executive comms) * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Ability to travel 25-50% * CISSP/CISM or similar certification preferred * Limited immigration sponsorship may be available Key requirements *