Expert Data Protection Engineer

Experian

1d

About The Position

The Data Protection team secures Experian’s data through encryption, key management, and certificate services across on-premises systems and the cloud. As the technical authority for Experian’s cryptographic infrastructure—including hardware security modules (HSMs), appliances, and AWS cryptographic services—the Expert Data Protection Engineer guides encryption strategy and works with teams across the company to incorporate data protection into their projects.

This role leads multiple infrastructure projects, engineers and operates Data Protection systems, and establishes standards for integration, key lifecycle management, and operational readiness. The position reports to the Data Protection Manager and is based in or near one of Experian’s designated collaboration hubs: Costa Mesa or San Jose, California; Allen or Austin, Texas; Franklin, Tennessee; New York, New York; Schaumburg, Illinois; Washington, D.C.; Atlanta, Georgia; Boston, Massachusetts; or Seattle, Washington. Experian emphasizes in-person collaboration at these hubs, while also describing flexible work options that may include remote, hybrid, or in-office work.

Requirements

• 10 or more years of experience in information security engineering or a related field, including experience as a subject matter expert or technical advisor to management.
• 6 or more years of experience with IT applications and systems.
• 3 or more years of experience with databases such as Oracle, DB2, SQL Server, or Teradata.
• Hands-on experience with encryption technologies, including file encryption, encryption key lifecycle management, and security policies.
• Experience guiding development teams on encrypting data on-premises or in the cloud.
• Experience with AWS cloud services and AWS CloudHSM, Thales CipherTrust Manager, Thales HSM, or other key management solutions.
• Experience designing and implementing encryption strategies across AWS, Azure, and Google Cloud, including customer-managed keys and third-party HSM integration.
• Experience documenting encryption strategy with business teams.
• Experience designing and building automated solutions.
• Experience with monitoring tools such as Splunk, Grafana, or Prometheus.
• Reside in or near one of the designated collaboration hubs for the role.

Responsibilities

• Lead multiple Data Protection infrastructure projects, keeping solutions aligned with business goals, timelines, and quality standards.
• Advise management on encryption, key management, and cryptographic services strategy for on-premises and cloud environments.
• Serve as the subject matter expert for encryption, key management, and certificate lifecycle management.
• Partner with application, cloud, security operations, audit, and compliance teams to design and build Data Protection capabilities into larger technology projects.
• Engineer and operate Data Protection systems, including encryption onboarding, builds, upgrades, troubleshooting, daily health checks, and maintenance.
• Set standards for integration, key lifecycle management, and operational readiness, including documentation, monitoring, and alerting, and keep documentation current.
• Identify gaps in Data Protection controls and address them through upgrades, reconfiguration, or automation while helping shape the team’s roadmap.
• Prepare for and present in security audits, support security policy reviews, and participate in a rotating on-call schedule.

Benefits

• Great compensation package and bonus plan.
• Medical, dental, and vision benefits.
• Matching 401(k).
• Flexible work environment, with the ability to work remotely, hybrid, or in-office.
• Flexible time off, including volunteer time off, vacation, and sick time.
• 12 paid holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed