Cyber Data Protection/PKI Specialist Senior Consultant
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+4 more
Job description
Experteer Overview In this role you advise clients on data protection and encryption strategies, designing and operating PKI and certificate management across cloud, on-premises, and hybrid environments. You lead data protection initiatives, stay ahead of encryption technologies, and guide delivery teams to ensure high-quality, on-time outcomes. You work closely with clients and cross-functional teams to align security solutions with business goals, risk posture, and regulatory needs. You will shape data protection programs and contribute to a resilient cyber posture. Compensation / Benefits * Act as SME and trusted advisor on data protection, encryption, and secure key management for diverse environments * Design, implement, and operate encryption strategies and PKI lifecycle management to minimize data risk * Lead client engagements: drive execution, communicate progress, and ensure high-quality deliverables * Monitor project timelines, budgets, and risk; report to clients and firm leadership * Stay current with encryption tech (post-quantum, confidential computing, secure enclaves) and industry trends * Evaluate and propose new tools and solutions to enhance data security Tasks * 5+ years in data protection and information security (data discovery, classification, DLP, cloud security, encryption) * 5+ years PKI concepts (CAs, RA, CSR, OCSP, CRL, HSM, key management) * 2+ years implementing encryption technologies and TLS-based security; cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection roadmaps and frameworks; hands-on data protection tech experience * 2+ years CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert) * 2+ years TLS/SSL, SSH, S/MIME, code signing, NIST-aligned practices; certificate lifecycle management; renewal/compliance * 2+ years integrating with F5, load balancers, WAFs, Kubernetes, API gateways, and cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, executive communication * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Willingness to travel 25-50% * Professional certifications such as CISSP or CISM Key requirements *
Requirements
artifacts * Stay current with encryption tech (post-quantum, confidential computing, secure enclaves) and industry trends * Evaluate and propose new tools and solutions to enhance data security Tasks * 5+ years in data protection and information security (data discovery, classification, DLP, cloud security, encryption) * 5+ years PKI concepts (CAs, RA, CSR, OCSP, CRL, HSM, key management) * 2+ years implementing encryption technologies and TLS-based security; cloud encryption concepts (BYOK, client/server-side) * 2+ years developing data protection roadmaps and frameworks; hands-on data protection tech experience * 2+ years CLM platforms (AppViewX, Venafi, Keyfactor, DigiCert) * 2+ years TLS/SSL, SSH, S/MIME, code signing, NIST-aligned practices; certificate lifecycle management; renewal/compliance * 2+ years integrating with F5, load balancers, WAFs, Kubernetes, API gateways, and cloud platforms * 2+ years client-facing skills: requirements gathering, stakeholder management, workshops, aa aaaaau_ communication * 2+ years leading small teams/workstreams and delivering client-ready artifacts * Willingness to travel 25-50% * Professional certifications such as CISSP or CISM Key requirements *
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on us.experteer.comGood distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again
9 Ways to Make Money Hacking
Dev Digest 138 - Are you secure about this?
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.