Data Security Senior Specialist

Job Overview

Responsible for ensuring the effective design, integration, and optimization of cryptographic and certificate management solutions within the Data Security Tower. The role involves leading advanced operations across PKI, HSM, and encryption systems while supporting cross-functional teams in maintaining compliance and data integrity.

Key Responsibilities

- Lead and optimize PKI and certificate lifecycle management systems using multi-vendor platforms (e.g., Nokia NCM/NCLM, Entrust, Venafi).

- Integrate HSMs into enterprise cryptographic workflows and maintain secure key management practices.

- Design and maintain encryption frameworks for data-in-transit and data-at-rest environments.

- Collaborate with SOC, Infrastructure, and Compliance teams on incident response, threat mitigation, and vulnerability closure related to encryption and PKI services.

- Manage Quantum Key Distribution (QKD) pilot deployments or related secure communication implementations.

- Ensure system hardening, configuration baselines, and periodic control validations are performed across all data security assets.

- Contribute to documentation, technical reporting, and process improvements for certificate and key management.

Shift Coverage

85 operational coverage (morning and evening shifts) with on-call rotation for P1 and P2 incidents.

Required Qualifications

- Bachelor's degree in Cybersecurity, Computer Science, or related technical field.

- Minimum of 5 years experience in PKI, HSM, encryption, or key management systems in large-scale environments.

Preferred Certifications

- Thales Luna HSM Certification or Entrust Key Management Specialist.

- Venafi TLS Protect or Nokia Certificate Lifecycle Manager Certification.

- Microsoft or AWS Certified Security Specialty.

- CISSP, CISM, or equivalent certifications are advantageous.