Cyber Data Protection/PKI Manager

Deloitte T.T.L.
McLean, VA, United States
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Cloud Computing Cloud Computing Security Cyber Security Data Discovery Data Security Key Management Public Key Infrastructure Load Balancing Data Classification Kubernetes Api Gateway

Job description

Experteer Overview In this role, you guide client data protection and encryption strategies within Deloitte’s Cyber Strategy & Transformation. You will advise on PKI, encryption, and key management across hybrid environments, and design and operate solutions to reduce data risk. You lead delivery governance, coordinate with teams, and stay ahead of crypto trends to strengthen client security. This is a chance to shape large-scale security programs and drive on-time, on-budget outcomes for clients. Compensation / Benefits * Serve as SME and trusted advisor on data protection and encryption requirements * Advise on encryption, decryption, secure key management, and PKI strategies across cloud, on-prem, and hybrid * Design, implement, and operate data protection solutions (certificate lifecycle management, monitoring, deployment) * Drive day-to-day engagement execution, communicate updates to clients and Deloitte leadership, track timelines * Stay current on emerging encryption technologies and industry trends, evaluate and recommend tools and solutions to strengthen data security Tasks * 7+ years in data protection and information security (data discovery, data classification, rights management, DLP, CASB, encryption, certificate lifecycle management, cloud security, SaaS security) * 7+ years with PKI concepts and enterprise trust models * 5+ years leading CLM strategy, design, and implementation using AppViewX, Venafi, Keyfactor, DigiCert, or similar * Advanced knowledge of cryptography, certificate lifecycle processes, key management, HSM integration, and crypto policy enforcement * Ability to define target-state architecture and operating models for large-scale environments * Hands-on understanding of certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud, and web/app servers * Experience leading discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, and workshop facilitation Key requirements *

Requirements

data and industry trends, evaluate and recommend tools and solutions to strengthen data security Tasks * 7+ years in data protection and information security (data discovery, data classification, rights management, DLP, CASB, encryption, certificate lifecycle management, cloud security, SaaS security) * 7+ years with PKI concepts and enterprise trust models * 5+ years leading CLM strategy, design, and implementation using AppViewX, Venafi, Keyfactor, DigiCert, or similar * Advanced knowledge of cryptography, certificate lifecycle processes, key management, HSM integration, and crypto policy enforcement * Ability to define target-state architecture and operating models for large-scale environments * Hands-on understanding of certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud, and web/app servers * Experience leading discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive aa aaaaaaay_ management, and workshop facilitation Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · WWC 2023

2:28 min

Understanding Kubernetes architecture and core cluster components

Marc Nimmerrichter · WWC 2022

1:32 min

Designing a centralized API gateway and identity provider

Axel Barbier · WWC 2023

4:04 min

Embedding data security and applied ethics into developer education

Daniel Tao +3 · WWC 2024

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:04 min

Overview of Kubernetes operators and custom resource definitions

Philipp Krenn · WWC 2022

Videos

See all

Related articles

See all