Data Protection Engineer

IntraEdge Technology; Bengaluru; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

IntraEdge Technology in Bengaluru is seeking a Data Protection Engineer to design and implement secure data protection across cloud environments, focusing on encryption, secure network design, and compliance-driven security. The role requires hands-on experience with AWS security services, cryptography, key management, and cloud networking.

You will collaborate with DevOps to embed security in CI/CD and monitor for incidents.

Qualifications

• Strong experience with AWS cloud platform and security services.
• In-depth knowledge of cryptography principles (encryption, hashing, PKI, TLS/SSL).
• Hands-on experience with key management systems and secure lifecycle management.
• Cloud networking and security architecture proficiency.
• Experience with data protection, DLP tools, and access control mechanisms.
• Familiarity with network security protocols, firewalls, and intrusion detection systems.
• Proficiency in scripting (Python/Bash) and problem-solving.

Responsibilities

• Design and implement data protection strategies across cloud and distributed systems.
• Develop and manage encryption solutions (data-at-rest, data-in-transit, and key management).
• Work with AWS security services such as KMS, IAM, CloudHSM, Secrets Manager, and Shield.
• Architect and secure cloud networking (VPCs, subnets, VPNs, PrivateLink, security groups, NACLs).
• Ensure compliance with ISO 27001, SOC2, GDPR and other regulatory frameworks.
• Implement data loss prevention (DLP) mechanisms and monitoring tools.
• Conduct security risk assessments, vulnerability analysis, and threat modeling.
• Collaborate with DevOps to embed security best practices into CI/CD pipelines.
• Monitor and respond to security incidents related to data breaches or vulnerabilities.
• Maintain documentation of security architectures, policies, and procedures.

Skills

Cloud security

Data protection

Cryptography principles

Network security

Scripting (Python/Bash)

Threat modeling

Incident response

Tools

KMS (Key Management Service)

IAM

CloudHSM

Secrets Manager

Shield

Job description

We are seeking a highly skilled Data Protection Engineer with strong expertise in AWS, Cryptography, and Cloud Networking to design and implement secure data protection solutions across cloud environments. The ideal candidate will be responsible for safeguarding sensitive data through encryption, secure network design, and compliance-driven security frameworks.

Key Responsibilities

• Design and implement data protection strategies across cloud and distributed systems.
• Develop and manage encryption solutions (data-at-rest, data-in-transit, and key management).
• Work with AWS security services such as KMS, IAM, CloudHSM, Secrets Manager, and Shield.
• Architect and secure cloud networking (VPCs, subnets, VPNs, PrivateLink, security groups, NACLs).
• Ensure compliance with industry standards such as ISO 27001, SOC2, GDPR, and other regulatory frameworks.
• Implement data loss prevention (DLP) mechanisms and monitoring tools.
• Conduct security risk assessments, vulnerability analysis, and threat modeling.
• Collaborate with DevOps and engineering teams to embed security best practices into CI/CD pipelines.
• Monitor and respond to security incidents related to data breaches or vulnerabilities.
• Maintain documentation of security architectures, policies, and procedures.

Required Skills & Qualifications

• Strong experience with AWS cloud platform and security services.
• In-depth knowledge of cryptography principles (encryption algorithms, hashing, PKI, TLS/SSL).
• Hands-on experience with key management systems and secure key lifecycle management.
• Strong understanding of cloud networking and security architecture.
• Experience with data protection, DLP tools, and access control mechanisms.
• Familiarity with network security protocols, firewalls, and intrusion detection systems.
• Proficiency in scripting or programming (Python, Bash, or similar).
• Strong analytical, problem-solving, and troubleshooting skills.

Preferred Qualifications

• Experience with multi-cloud environments (Azure, GCP).
• Knowledge of Zero Trust architecture and secure access frameworks.
• Familiarity with container security (Docker, Kubernetes).
• Relevant certifications such as AWS Certified Security Specialty, CISSP, CISM, or CEH.
• Experience with security automation and MLOps/DevSecOps practices.

Good to Have

• Experience in financial services, healthcare, or other regulated industries.
• Exposure to data privacy tools and frameworks.
• Understanding of secure software development lifecycle (SSDLC).