Venafi, Azure Security)

American IT Systems•Portland, OR

5d•Onsite

About The Position

We are seeking a highly skilled Data Security Engineer to design, implement, and manage enterprise data protection and security solutions. The ideal candidate will have strong expertise in Cohesity, PKI (Public Key Infrastructure) with tools like Venafi, and Azure Cloud Security, along with a broader understanding of data protection, encryption, identity security, and compliance frameworks.

Requirements

Expertise in Cohesity (Backup, recovery, data protection, ransomware protection).
Strong understanding of PKI fundamentals and operations.
Experience with Venafi (Certificate lifecycle management and automation).
Proficient in Azure Cloud Security, specifically Azure AD.
Knowledge of Compliance Management and Assessments principles and practices.
Bachelor's degree in Computer Science, Information Technology, or a related field.
A minimum of 7 10 years of experience in data security, with a focus on enterprise level solutions.
Strong analytical and problem solving skills, along with excellent communication and collaboration abilities.

Nice To Haves

Experience with additional cloud security tools and frameworks.
Familiarity with data loss prevention (DLP) technologies.
Knowledge of security compliance frameworks beyond those listed in mandatory skills.
Certifications in relevant areas (e.g., CISSP, CISM, Azure Security Engineer).

Responsibilities

Design, implement, and manage Cohesity backup and data management solutions.
Ensure secure backup architecture including immutability, ransomware protection, and disaster recovery.
Implement backup security controls, access governance, and disaster recovery capabilities.
Develop data protection controls across on premises, hybrid, and cloud environments.
Design and manage enterprise PKI infrastructure.
Ensure compliance with certificate governance and cryptographic standards.
Manage HSM integrations and key protection strategies.
Implement and maintain Azure security controls across IaaS, PaaS, and SaaS.
Configure and manage Azure Key Vault for key and secret management.
Utilize Azure Defender / Microsoft Defender for Cloud.
Enforce identity and access management via Azure AD, RBAC, and Conditional Access.
Implement encryption controls for data at rest and in transit.
Define and maintain data classification and retention policies.
Support compliance requirements including GDPR, HIPAA, PCI DSS, ISO 27001, SOC2, NIST, and DORA.