Senior Encryption Engineer (Data at Rest)

Elevance Health•Tampa, FL

5d•Hybrid

About The Position

The Senior Encryption Engineer (Data at Rest) supports and secures enterprise-scale data protection platforms across hybrid cloud and on-premises environments, with a focus on encryption, tokenization, key management, and operational stability. The role partners with application and infrastructure teams to troubleshoot integrations, automate operational processes, maintain security controls, and reliably protect sensitive data across complex production environments. The position leads architecture support for information and network security technologies, risk assessment methodologies, and the requirements, architecture, and software design of security products and services. It develops strategies for discovering and responding to networking attacks and for security incident response; resolves complex technical problems and serves as an escalation point; and prepares presentations to obtain IT management approval for significant security-system replacements or reconfigurations. The role also sets vendor strategy, consults with business and development project teams, designs access-management and network-security solutions, contributes to technology direction, prepares management reports, and may serve as a technical merger and acquisition lead. It acts as a subject matter expert and provides top-tier support across at least five information security knowledge areas. The role is hybrid, requiring associates to work in-office one to two days per week. Candidates must live within a reasonable commuting distance of a posting location unless an accommodation is granted as required by law. The position is classified as Non-Management Exempt and 1st Shift.

Requirements

Bachelor of Science or Bachelor of Arts in Information Technology or a related field, and at least 8 years of experience in systems administration and information-systems security, access management, network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; alternatively, an equivalent combination of education and experience.
Experience across multiple technical and business disciplines.
Capability to provide top-tier support in at least five of these areas: access control; application security; business continuity and disaster recovery planning; cryptography; information security and risk management; legal, regulations, compliance and investigations; operations security; physical/environmental security; security architecture and design; telecommunications and network security.

Nice To Haves

Deep Protegrity expertise, including architecture, deployment patterns, policy design and administration, integration troubleshooting, and performance and stability considerations.
Experience deploying and troubleshooting infrastructure with Terraform, including plans and applies, modules, environment promotion, and state troubleshooting.
Experience maintaining infrastructure, configuration, or code in GitHub or a similar source-control platform, including pull-request reviews and release or change workflows.
Practical experience across AWS and either Azure or GCP, particularly with application integrations spanning environments, or strong willingness to ramp up quickly.
Hands-on experience with serverless services such as Lambda, Azure Functions, Cloud Functions, or Cloud Run, including security and identity patterns.
Working knowledge of EKS, AKS, Cloud Run, or equivalent, particularly connectivity, identity, secrets, and logging.
Ability to write effective Splunk queries and use log data for troubleshooting and investigations.
ServiceNow experience with incident and request management; creating or maintaining request/catalog forms is a plus.
Experience supporting data protection for object storage, databases, and file-based transfers, including delimited or fixed-width files and operational concerns such as scanning, access patterns, and throughput.
Experience with Snowflake integrations or usage, including connectivity, role and access concepts, data pipelines, or security model familiarity.
Experience integrating pipelines or applications with HashiCorp Vault, including authentication methods, secret consumption patterns, and rotation.
Experience performing HSM initialization and operations, including key ceremony participation, partition and user setup, and integration troubleshooting.

Responsibilities

Lead system and network architecture support for information and network security technologies.
Lead the development and execution of risk assessment methodologies suited to business, regulatory, and technical considerations.
Lead development of requirements, system architecture, and software design for security products and services.
Develop strategies to discover, evaluate, and respond to new networking attacks, and develop security incident response plans and strategies.
Resolve complex technical problems and serve as a point of technical escalation.
Create presentations and seek IT management approval for significant replacements or reconfigurations of major enterprise security systems.
Set vendor strategy and direction.
Provide technical consultation to business partners and developers on project teams as assigned.
Design and engineer access-management and network-security solutions based on business requirements and technology standards.
Work with architecture teams to update technology direction and strategy.
Develop reports supporting strategy and direction for management.
Serve as a technical merger and acquisition lead when needed.
Act as a subject matter expert among peers, managers, and senior management.
Provide top-tier support in five or more information security knowledge areas.
Support and secure enterprise data protection platforms across hybrid cloud and on-premises environments.
Troubleshoot application and infrastructure integrations and automate operational processes.
Maintain security controls and reliable protection of sensitive data across production environments.