Expert Data Protection Engineer
About The Position
The Data Protection team secures Experian’s data through encryption, key management, and certificate services across on-premises systems and cloud environments. The Expert Data Protection Engineer serves as a technical authority for cryptographic infrastructure, including hardware security modules (HSMs), appliances, and AWS cryptographic services, and guides encryption strategy while partnering with teams across the company to incorporate Data Protection into their projects. The role leads multiple infrastructure projects, advises management on cryptographic strategy, and serves as a subject matter expert in encryption, key management, and certificate lifecycle management. It engineers and operates Data Protection systems, establishes integration and operational-readiness standards, identifies and closes control gaps, and supports audits, policy reviews, and a rotating on-call schedule. The employee reports to the Data Protection Manager and must reside in or near one of the designated collaboration hubs: Costa Mesa or San Jose, California; Allen or Austin, Texas; Franklin, Tennessee; New York, New York; Schaumberg, Illinois; Washington, D.C.; Atlanta, Georgia; Boston, Massachusetts; or Seattle, Washington.
Requirements
- 10+ years of experience in information security engineering or a related field, including experience as a subject matter expert or technical advisor to management.
- 6+ years of experience with IT applications and systems.
- 3+ years of experience with databases such as Oracle, DB2, SQL Server, or Teradata.
- Hands-on experience with encryption technologies, including file encryption, encryption key lifecycle management, and security policies, and experience guiding development teams on encrypting data on-premises or in the cloud.
- Experience with AWS cloud services and AWS CloudHSM, Thales CipherTrust Manager, Thales HSM, or other key management solutions.
- Experience designing and implementing encryption strategies across AWS, Azure, and Google Cloud, including customer-managed keys and third-party HSM integration, and documenting encryption strategy with business teams.
- Experience designing and building automated solutions, and working with monitoring tools such as Splunk, Grafana, or Prometheus.
- Reside in or near one of the designated collaboration hubs for the role.
Responsibilities
- Lead several Data Protection infrastructure projects at once, aligning solutions with business goals, timelines, and quality standards.
- Advise management on encryption, key management, and cryptographic services strategy for on-premises and cloud environments.
- Serve as the subject matter expert for encryption, key management, and certificate lifecycle management.
- Partner with application, cloud, security operations, audit, and compliance teams to design and build Data Protection capabilities into larger technology projects.
- Engineer and operate Data Protection systems, including encryption onboarding, builds, upgrades, troubleshooting, daily health checks, and maintenance.
- Set standards for integration, key lifecycle management, and operational readiness, including documentation, monitoring, and alerting, and keep documentation current.
- Identify gaps in Data Protection controls and address them through upgrades, reconfiguration, or automation while helping shape the team’s roadmap.
- Prepare for and present in security audits, support security policy review, and participate in a rotating on-call schedule.
Benefits
- Great compensation package and bonus plan.
- Core benefits including medical, dental, vision, and matching 401K.
- Flexible work environment, with the ability to work remote, hybrid, or in-office.
- Flexible time off including volunteer time off, vacation, sick time, and 12 paid holidays.
- Variable pay opportunity.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
