Data Security Consultant

Serves as the Subject Matter Expert (SME) and solution architect for data and cryptographic security systems within the Managed Security Services environment. The Consultant defines data security architecture, ensures secure cryptographic integrations, and leads technical design and governance across PKI, HSM, QKD, and certificate lifecycle management domains.

Key Responsibilities

- Define and own the end-to-end architecture for data security, PKI, and cryptographic systems.

- Architect and validate solutions for enterprise-scale key management, encryption, and quantum-safe cryptography.

- Oversee integration of PKI, HSM, and certificate management systems across mission-critical environments.

- Act as technical design authority for data security configurations, ensuring adherence to best practices and compliance frameworks (e.g., NCA, CST, ISO 27001).

- Provide expert-level troubleshooting and design support for encryption and authentication infrastructure.

- Evaluate emerging cryptographic technologies such as QKD and post-quantum encryption methods for enterprise adoption.

- Collaborate with vendors and OEMs to assess product fit, perform proof-of-concepts, and advise on platform optimization.

- Lead capability-building initiatives and mentor data security engineers and specialists.

Shift Coverage

8×5 operational coverage (morning and evening shifts) with on-call for P1 and P2 incidents.

Required Qualifications

- Bachelor’s degree in Cybersecurity, Network Engineering, or equivalent technical field.

- Minimum of 8 years’ experience in cryptographic system design, PKI, or certificate management solutions.

- Strong background in enterprise data security architecture and cryptographic lifecycle governance.

Preferred Certifications

- Advanced vendor certifications (e.g., Thales Certified Architect, Entrust PKI Expert, Venafi TLS Protect Expert, Nokia NCM/NCLM Certified Specialist).

- CISSP, CISM, or CCSP for governance alignment.

- Cloud security certifications (AWS Security Specialty, Azure Security Engineer).

- post-quantum cryptography or QKD training credentials preferred.

Reporting Line

Reports to Data Security Tower Lead.

Tools & Platforms

Nokia NCM, Nokia NCLM, Thales Luna HSM, Entrust PKI, Venafi TLS Protect, Fortanix EKM, HashiCorp Vault, Quantum Key Distribution platforms.