> Markdown version of [/jobs/ext/2017173-cyber-data-protection-pki-specialist-senior-consultant](https://www.wearedevelopers.com/jobs/ext/2017173-cyber-data-protection-pki-specialist-senior-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Data Protection/PKI Specialist Senior Consultant

- **Company:** Deloitte T.T.L.
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Secure Shell (SSH), Client Server Models, Cloud Computing, Cyber Security, Key Management, Multi-Purpose Internet Mail Extensions (MIME), Public Key Infrastructure, Transport Layer Security, Load Balancing, Kubernetes, Api Gateway
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/cyber-data-protection-pki-specialist-senior-consultant-san-francisco-ca-usa-58886624

## About the Role

vendor and communicate progress to clients and leadership * Develop data protection strategies, roadmaps, and governance frameworks * Stay current on encryption tech trends (post-quantum, confidential computing, secure enclaves) and advise on tool adoption * Collaborate with delivery teams to ensure high-quality client deliverables and on-time, on-budget results * Support architecture and implementation workstreams, including CLM platforms and TLS/SSL practices * Coordinate with IT, security, and business stakeholders; lead workshops and executive communications * Travel 25-50% as required by client assignments Tasks * Bachelor's degree in a related field * 5+ years in data protection and information security with relevant domains * 5+ years PKI concepts including certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years experience with encryption technologies and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies and aaaaaas
_ * 2+ years hands-on with one or more data protection technologies and CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert) * 2+ years experience with cryptographic standards and protocols (TLS/SSL, SSH, S/MIME, code signing) * 2+ years certificate discovery, automation, renewal and compliance monitoring * 2+ years working across F5, load balancers, WAFs, Kubernetes, API gateways, and cloud platforms * 2+ years client-facing skills and leading small teams/workstreams * Ability to travel 25-50% * Professional certifications such as CISSP, CISM or similar Key requirements *

## Description

Experteer Overview In this role you will act as a subject matter expert in data protection and PKI to help clients design, implement, and operate encryption and key-management solutions. You'll collaborate with cross-functional teams to reduce data risks across cloud, on-premises, and hybrid environments. You will guide clients on PKI lifecycle management, certificate health, and compliance while staying ahead of emerging encryption technologies. This role offers scope to influence security strategy within Deloitte's Cyber Strategy & Transformation practice and deliver measurable protection improvements for client environments. Compensation / Benefits * Serve as SME and trusted advisor on data protection, encryption, and secure key management * Design and implement encryption strategies across cloud, on-premises, and hybrid environments * Oversee PKI deployment, certificate lifecycle management, health monitoring, and vendor evaluations * Lead client engagements, drive day-to-day execution, and communicate progress to clients and leadership * Develop data protection strategies, roadmaps, and governance frameworks * Stay current on encryption tech trends (post-quantum, confidential computing, secure enclaves) and advise on tool adoption * Collaborate with delivery teams to ensure high-quality client deliverables and on-time, on-budget results * Support architecture and implementation workstreams, including CLM platforms and TLS/SSL practices * Coordinate with IT, security, and business stakeholders; lead workshops and executive communications * Travel 25-50% as required by client assignments Tasks * Bachelor's degree in a related field * 5+ years in data protection and information security with relevant domains * 5+ years PKI concepts including certificates, CAs, RA, CSR, OCSP, CRL, HSM, key management * 2+ years experience with encryption technologies and cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection strategies and roadmaps * 2+ years hands-on with one or more data protection technologies and CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert) * 2+ years experience with cryptographic standards and protocols (TLS/SSL, SSH, S/MIME, code signing) * 2+ years certificate discovery, automation, renewal and compliance monitoring * 2+ years working across F5, load balancers, WAFs, Kubernetes, API gateways, and cloud platforms * 2+ years client-facing skills and leading small teams/workstreams * Ability to travel 25-50% * Professional certifications such as CISSP, CISM or similar Key requirements *


## Related Videos

- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [20 billion requests a week: Upgrading Twilio's API gateway at scale](https://www.wearedevelopers.com/videos/100234-20-billion-requests-a-week-upgrading-twilio-s-api-gateway-at-scale)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)