SecuPi Data Security Administrator Remote

KeyBank; United States; Hybrid; USD 80,000 - 150,000; Full time

Job summary

KeyBank is seeking a Data Security (SecuPi) Administrator to support, operate, and enhance enterprise data security across databases, cloud platforms, analytics environments, and AI-enabled services. You will configure SecuPi and related protections to enforce least-privilege access and data classification.

Collaborating with Cybersecurity, Infrastructure, Cloud, and Data Governance teams, you will implement scalable controls, IAM/PAM integration, DAM, DLP, and monitoring, and drive automation

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or Cyber Security.
• 3+ years of experience in cybersecurity, security engineering, infrastructure security, database security, or a related technical discipline.
• Experience administering or engineering enterprise security technologies.
• Working knowledge of database technologies such as Oracle, Microsoft SQL Server, PostgreSQL, MySQL, or similar platforms.
• Understanding of data security concepts including encryption, tokenization, masking, access control, data classification, and database activity monitoring.
• Knowledge of authentication and authorization concepts including IAM, RBAC, ABAC, SSO, service accounts, and privileged access.
• Experience troubleshooting complex enterprise technology integrations.
• Familiarity with Linux and/or Windows operating environments.
• Scripting or automation experience using technologies such as Python, PowerShell, Bash, REST APIs, or similar tools.
• Understanding of network security concepts including TCP/IP, TLS, proxies, firewalls, DNS, and secure communications.
• Experience securing cloud platforms such as AWS, Microsoft Azure, or Google Cloud.
• Familiarity with Kubernetes, containers, APIs, microservices, and modern application architectures.
• Strong analytical, troubleshooting, documentation, and communication skills.

Responsibilities

• Engineer, configure, administer, and maintain enterprise data security platforms, including SecuPi and comparable technologies.
• Implement and maintain policies for data access control, dynamic data masking, encryption, tokenization, filtering, and other data protection mechanisms.
• Support security controls across relational and NoSQL databases, data warehouses, cloud data platforms, APIs, applications, and analytics environments.
• Integrate data security technologies with enterprise IAM, PAM, SIEM, SOAR, DLP, and security monitoring platforms.
• Develop and maintain policies that enforce least-privilege and role- or attribute-based access to sensitive information.
• Support discovery and classification of sensitive data, including PII, financial information, credentials, intellectual property, and other regulated or confidential information.
• Monitor data access activity and investigate anomalous, unauthorized, or high-risk access patterns.
• Troubleshoot platform, policy, integration, connectivity, and performance issues affecting data security controls.
• Assess proposed database, application, cloud, and data-platform changes for potential security impacts.
• Partner with application and database teams to integrate security controls into new and existing solutions.
• Support security requirements for AI applications, copilots, and autonomous agents accessing enterprise data.
• Help ensure that AI-enabled services access only data authorized for the requesting user, application, or service identity.
• Develop automation and scripts to improve deployment, monitoring, policy management, reporting, and operational efficiency.
• Participate in vulnerability management, incident response, security investigations, and remediation activities involving enterprise data.
• Maintain security architecture diagrams, configuration standards, operating procedures, runbooks, and technical documentation.
• Support internal and external audits by providing evidence of data security controls and their effectiveness.
• Evaluate new data security technologies and recommend improvements to the organization’s data protection architecture.

Skills

Security engineering

Data security

IAM

Scripting

Linux/Windows

Encryption

DLP

Cloud security

Education

Bachelor’s degree in Cybersecurity or related field

Tools

SecuPi

DAM

DSPM

Kubernetes

SIEM

SOAR

Job description

KeyBank is seeking a Data Security (SecuPi) Administrator to support, operate, and enhance enterprise data security across databases, cloud platforms, analytics environments, and AI-enabled services. You will configure SecuPi and related protections to enforce least-privilege access and data classification.

Collaborating with Cybersecurity, Infrastructure, Cloud, and Data Governance teams, you will implement scalable controls, IAM/PAM integration, DAM, DLP, and monitoring, and drive automation