Encryption Architect

Summary

Join Experian as an Encryption Architect and lead the evaluation, planning, deployment, and preparation of operations for tools and systems used by the Data Protection Team.

Requirements

• 8+ years' of related work experience
• 5+ years' experience in operations and maintenance of data protection at an enterprise scale
• 3+ years' experience architecting and implementing encryption strategies on AWS, Azure, or Google Cloud, including working on CMKs/BYOK and integrating with a third-party HSM Provider
• Experience in Gemalto/SafeNet/Thales HSM and Key management, or Vormetric Key management, is required
• Experience in Certificate Lifecycle Management of all enterprise certificate usage, including automation
• Experience in BYOK processes and client-side encryption on cloud platforms such as AWS, Azure, or Google Cloud
• Experienced in managing and implementing application-level encryption, database-level encryption, and file-level encryption
• Ability to collaborate and work closely with global teams across different time zones

Responsibilities

• Provide SME expertise on security tool capabilities and configuration adjustments when needed to contain and implement controls such as encryption, key management, and database monitoring as applicable
• Collaborate with the Manager to identify capability gaps and operational inconsistencies within the Data Protection controls environment, and develop a plan to address them through product enhancement, reconfiguration, upgrades, or process automation
• Ensure build documentation for all security controls is available on the Enterprise cybersecurity WiKi, including configuration standards and repeatable processes to support the tools
• Build, manage, and maintain the automated reporting dashboards systems
• Build, manage, and maintain the intake process for requests on ServiceNow or a suitable tool
• Define plan and roadmap for dashboard automation and ServiceNow intake process and report weekly progress against plan
• Ensure Technical and Process documentation is 100% current all the time (all changes thoroughly documented)
• Ensure new builds/integrations/agent implementation follow operational readiness processes, are documented, health/performance KPI's are defined and in place, and monitoring and alerting is in place before promoting to production
• Demonstrate progress toward obtaining a security-specific (or specific security product certification), or maintain a current certification

Benefits

• Great compensation package and bonus plan
• Core benefits, including medical, dental, vision, and matching 401K
• Flexible work environment, ability to work remotely, hybrid, or in-office
• Flexible time off, including volunteer time off, vacation, sick, and 12-paid holidays