Expert Data Protection Engineer
About The Position
The Data Protection team secures Experian’s data through encryption, key management, and certificate services across on-premises systems and the cloud. As the technical authority for Experian’s cryptographic infrastructure—including hardware security modules (HSMs), appliances, and AWS cryptographic services—the Expert Data Protection Engineer guides encryption strategy and works with teams across the company to incorporate data protection into their projects. The role leads multiple Data Protection infrastructure projects, advises management on cryptographic strategy, and serves as a subject matter expert in encryption, key management, and certificate lifecycle management. It partners with application, cloud, security operations, audit, and compliance teams to design and build capabilities into broader technology projects. The engineer operates and maintains Data Protection systems, sets integration and operational-readiness standards, addresses control gaps, supports audits and policy reviews, and participates in a rotating on-call schedule. This hybrid role reports to the Data Protection Manager and is based in or near one of Experian’s collaboration hubs: Costa Mesa or San Jose, California; Allen or Austin, Texas; Franklin, Tennessee; New York, New York; Schaumburg, Illinois; Washington, D.C.; Atlanta, Georgia; Boston, Massachusetts; or Seattle, Washington.
Requirements
- 10+ years of experience in information security engineering or a related field, including experience as a subject matter expert or technical advisor to management.
- 6+ years of experience with IT applications and systems.
- 3+ years of experience with databases such as Oracle, DB2, SQL Server, or Teradata.
- Hands-on experience with encryption technologies, including file encryption, encryption key lifecycle management, and security policies, and experience guiding development teams on encrypting data on-premises or in the cloud.
- Experience with AWS cloud services and AWS CloudHSM, Thales HSM, or other key management solutions.
- Experience designing and implementing encryption strategies across AWS, Azure, and Google Cloud, including customer-managed keys and third-party HSM integration, and documenting encryption strategy with business teams.
- Experience designing and building automated solutions, and working with monitoring tools such as Splunk, Grafana, or Prometheus.
- Reside in or near one of the designated collaboration hubs.
Responsibilities
- Lead several Data Protection infrastructure projects at once, keeping solutions aligned with business goals, timelines, and quality standards.
- Advise management on encryption, key management, and cryptographic services strategy for on-premises and cloud environments.
- Serve as the subject matter expert for encryption, key management, and certificate lifecycle management.
- Partner with application, cloud, security operations, audit, and compliance teams to design and build Data Protection capabilities into larger technology projects.
- Engineer and operate Data Protection systems, including encryption onboarding, builds, upgrades, troubleshooting, daily health checks, and maintenance.
- Set standards for integration, key lifecycle management, and operational readiness, including documentation, monitoring, and alerting; keep documentation current.
- Identify gaps in Data Protection controls and address them through upgrades, reconfiguration, or automation, while helping shape the team’s roadmap.
- Prepare for and present in security audits, support security policy review, and participate in a rotating on-call schedule.
Benefits
- Great compensation package and bonus plan.
- Medical, dental, and vision benefits.
- Matching 401(k).
- Flexible work environment, with the ability to work remote, hybrid, or in-office.
- Flexible time off, including volunteer time off, vacation, and sick time.
- 12 paid holidays.
- Variable pay opportunity.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
