Cyber Data Protection/PKI Specialist Senior Consultant

Experteer Overview In this role you help clients strengthen data protection and encryption capabilities, focusing on PKI and certificate lifecycle management. You work with cross-functional teams to design, implement, and operate encryption strategies across cloud, on-premises, and hybrid environments. You stay ahead of emerging technologies and provide guidance to reduce data risk while ensuring secure key management. Your work supports Deloitte’s cyber strategy by delivering high-quality, trusted advisory and practical security solutions. Compensation / Benefits * Act as SME and trusted advisor on data protection, encryption practices, and secure key management across environments * Design, implement and operate encryption strategies to protect sensitive data in cloud, on-premises, and hybrid setups; manage PKI deployment and lifecycle * Lead delivery efforts, communicate status to clients and leadership, and ensure timely, quality deliverables * Oversee project timelines and budget to ensure successful engagements * Stay current on encryption tech (post-quantum, confidential computing, secure enclaves, envelope encryption) and industry trends; evaluate new tools to enhance data security Tasks * 5+ years in data protection and information security (data discovery, classification, rights management, DLP, cloud security, encryption, CLM) * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years implementing encryption technologies and TLS, with cloud encryption concepts (BYOK, client-side/server-side) * 2+ years developing data protection strategies, roadmaps and frameworks; hands-on data protections services * 2+ years CLM platforms such as AppViewX, Venafi, Keyfactor, DigiCert or similar * 2+ years cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing; NIST-aligned) * 2+ years certificate discovery, inventory, automation, renewal, compliance monitoring * 2+ years working with integration points across F5, load balancers, WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Ability to travel 25-50% * Professional certifications such as CISSP or CISM (preferred) * Experience with cloud platforms (Azure, AWS, GCP) and data protection vendors (Thales, Fortanix, DigiCert, Protegrity) Key requirements *

_ ensure successful engagements * Stay current on encryption tech (post-quantum, confidential computing, secure enclaves, envelope encryption) and industry trends; evaluate new tools to enhance data security Tasks * 5+ years in data protection and information security (data discovery, classification, rights management, DLP, cloud security, encryption, CLM) * 5+ years with PKI concepts: certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years implementing encryption technologies and TLS, with cloud encryption concepts (BYOK, client-side/server-side) * 2+ years developing data protection strategies, roadmaps and frameworks; hands-on data protections services * 2+ years CLM platforms such as AppViewX, Venafi, Keyfactor, DigiCert or similar * 2+ years cryptographic standards/protocols (TLS/SSL, SSH, S/MIME, code signing; NIST-aligned) * 2+ years certificate discovery, inventory, automation, renewal, compliance monitoring * 2+ years working with integration points across F5, load aa aaaaaaK_ WAFs, Kubernetes, API gateways, cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Ability to travel 25-50% * Professional certifications such as CISSP or CISM (preferred) * Experience with cloud platforms (Azure, AWS, GCP) and data protection vendors (Thales, Fortanix, DigiCert, Protegrity) Key requirements *