Encryption Architect

Summary

Join Experian as an Encryption Architect, the key resource responsible for evaluating, planning, deploying, and managing data protection tools and systems. You will develop roadmaps, set technical direction for the Data Protection team, and evaluate new technologies. Collaborate with the manager to identify and address capability gaps. Ensure comprehensive documentation and maintain automated reporting dashboards. Manage the intake process for requests and define a roadmap for automation. Maintain up-to-date technical and process documentation and ensure new builds follow operational readiness processes. Demonstrate progress toward obtaining a relevant security certification. This role requires extensive experience in data protection, encryption strategies on major cloud platforms, and specific key management systems. Experian offers a competitive compensation package, core benefits, and a flexible work environment.

Requirements

• 8+ years' of related work experience
• 5+ years' experience in operations and maintenance of data protection at an enterprise scale
• 3+ years' experience architecting and implementing encryption strategies on AWS, Azure, or Google Cloud, including working on CMKs/BYOK and integrating with a third-party HSM Provider
• Proficient experience in Thales CipherTrust, Thales HSM (Gemalto/SafeNet), and Vormetric Key management is required
• Experience in Certificate Lifecycle Management of all enterprise certificate usage, including automation
• Experience in BYOK processes and client-side encryption on cloud platforms such as AWS, Azure, or Google Cloud
• Experienced in managing and implementing application-level encryption, database-level encryption, and file-level encryption
• Ability to collaborate and work closely with global teams across different time zones. This role has a regular Monday – Friday schedule, with the candidate expected to participate in an on-call schedule or work outside of normal work hours when required

Responsibilities

• Provide SME expertise on security tool capabilities and configuration adjustments when needed to contain and implement controls such as encryption, key management, and database monitoring as applicable
• Collaborate with the Manager to identify capability gaps and operational inconsistencies within the Data Protection controls environment, and develop a plan to address them through product enhancement, reconfiguration, upgrades, or process automation
• Ensure build documentation for all security controls is available on the Enterprise cybersecurity WiKi, including configuration standards and repeatable processes to support the tools
• Build, manage, and maintain the automated reporting dashboards systems
• Build, manage, and maintain the intake process for requests on ServiceNow or a suitable tool
• Define plan and roadmap for dashboard automation and ServiceNow intake process and report weekly progress against plan
• Ensure Technical and Process documentation is 100% current all the time (all changes thoroughly documented)
• Ensure new builds/integrations/agent implementation follow operational readiness processes, are documented, health/performance KPI's are defined and in place, and monitoring and alerting is in place before promoting to production
• Demonstrate progress toward obtaining a security-specific (or specific security product certification), or maintain a current certification

Benefits

• Great compensation package and bonus plan
• Core benefits, including medical, dental, vision, and matching 401K
• Flexible work environment, ability to work remotely, hybrid, or in-office
• Flexible time off, including volunteer time off, vacation, sick, and 12-paid holidays