Encryption Engineer

RR Donnelley•Warrenville, IL

2d•Remote

About The Position

RRD is seeking a highly specialized Encryption and Enterprise Data Resiliency Engineer to ensure our organization's business availability and data security. The ideal candidate will design, implement, and maintain our continuous data protection, modernized data backup systems, and enterprise encryption architecture, strictly adhering to resilience standards and ensuring data is backed by leveraging a Hardware Root of Trust.

Requirements

Bachelor's degree in a Computer Science, Information Systems or related field OR demonstrated ability to meet the job requirements through a comparable number of years of applicable work experience.
5-7 years of relevant work experience
Knowledge with Veeam, Avamar and Zerto
Hands-on experience with CipherTrust Manager (or similar KMS/TDE tools)
Strong understanding of VMware, vSphere, Microsoft Hyper-V, and SAN/NAS storage
Knowledge of TCP/IP, DNS, and Firewall rules as they relate to DR replication.
Minor proficiency in AI integration with business processes such as information gathering, inventory, automation and process improvement
Able to apply broad work experience and knowledge when analyzing complex problems.
Must be able consistently to identify critical elements, variables, and alternatives to develop solutions.
Must be able to organize/prioritize existing resources and incorporate new information, as needed, to implement the most effective solutions.
Able to communicate clearly and courteously with those who need to know about decisions/actions/problems.
Able to apply excellent functional computer knowledge in utilizing Microsoft Windows or other technical tools in completing assignments.

Responsibilities

Implement and manage Encryption Data Security Platforms that protect sensitive data at rest in accordance with RRD IT Governance policies.
Administer centralized Key Management (KMS) and manage encryption policies across databases, file systems, and cloud storage where applicable.
Support audit and compliance requirements (e.g., SOC2, PCI, HIPAA) regarding data encryption.
Manage Luna Hardware Security Module (HSM) partitions for high-assurance cryptographic operations (signing, hashing, and root key storage).
Manage and optimize all Backup & Replication environments, including virtual, physical, and cloud workloads.
Oversee backup job scheduling, monitoring, and troubleshooting to ensure 100% success rates.
Perform regular backup/restore testing to validate the recoverability of critical systems.
Utilize Dell Avamar and Data Domain integration for high-efficiency variable-length deduplication and image-level proxy management.
Manage Veeam Backup & Replication, including protecting Salesforce data, configuring Linux-based hardened repositories with immutability, and enabling Instant VM Recovery.
Administer technologies that extend real-time replication and continuous data protection (CDP).
Update and maintain Disaster Recovery Plans (DRP) and lead quarterly failover drills to meet RTO/RPO targets.
Ensure site-to-site connectivity and storage consistency during recovery scenarios.
Implement Zerto Virtual Manager (ZVM) and Virtual Replication Appliances (VRAs) for real-time replication mapping.
Configure the Zerto Journal for point-in-time recovery, enabling the ability to "rewind" application stacks to the exact second before a ransomware or corruption event.
Design Virtual Protection Groups (VPGs) for multi-tier applications to ensure write-order fidelity.
Automate one-click failover and execute non-disruptive disaster recovery testing in isolated "bubble" networks or dedicated cloud tenants.
Orchestrate seamless workload mobility, including cloud migrations (Azure/AWS), cross-hypervisor replication (VMware to Hyper-V), and intra-cloud disaster recovery if required.
Monitor storage capacity and performance related to backup repositories.
Apply patches, firmware updates, and version upgrades to data protection and data encryption software.
Collaborate with the Security Operations teams to integrate immutability and air-gapped backup solutions to combat ransomware.
Participates in the design, planning, installation, testing, implementation, and support of new hardware and software as well as evaluation and recommendation of current and potential vendors.
Provides leadership and/or liaison for design efforts within specific business domains, including best practices, business alignment, and requirements for supporting infrastructure.
Responds to Service Desk referrals of end-user requests for help solving PC hardware, software, peripheral, or production equipment-related problems or issues.
Prioritizes problems based on severity, urgency, and impact on the business; tracks all outstanding incidents until successful resolution.
May hand off extremely complex technical problems to higher-level support or other IT department staff if required.
Troubleshoots any technical difficulty with hardware and software issues, configurations, and peripheral equipment.
Works with enterprise support groups and outside vendors to resolve problems or issues.
Coordinates through the change management process to move, install, upgrade, remove and configure site IT assets and supporting infrastructure.
Maintains the asset management system (additions/changes/deletions) for accurate tracking of all IT assets within the site(s).
Identifies and recommends budgetary items based on infrastructure additions/improvements/removals.
Supports and conducts routine audits of site IT assets and processes to ensure compliance with established company policies and procedures, as well as compliance with Governmental regulations and policies.
Performs other related duties and participates in special projects as assigned.