Senior Data Protection Engineer - Remote Encryption & HSM

Experian; United States; Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Bonus plan

Health & wellness programs

Flexible work options

Learning and development opportunities

Job summary

Experian is seeking a Data Protection Engineer to lead encryption strategy across on‑prem and cloud environments. You will serve as SME for key management, HSMs, and certificate lifecycle, working with application, security, and audit teams to embed protection into projects.

Remote/hybrid options are available within designated hub regions and locales. A proven track record in encryption technologies and cloud security is essential.

Qualifications

• Minimum 10+ years in information security engineering or related field.
• Demonstrated experience as SME or technical advisor to management.
• Hands-on encryption, key lifecycle management, and policy implementation across on-prem and cloud environments.

Responsibilities

• Lead encryption and data protection infrastructure initiatives across on-prem and cloud.
• Advise on encryption, key management, and cryptographic services strategy.
• Act as SME for encryption lifecycle and certificate management.
• Collaborate with application, cloud, security, audit, and compliance teams to embed protection into projects.
• Engineer and operate Data Protection systems, including onboarding, builds, upgrades, and health checks.
• Define integration standards, key lifecycle processes, and maintain up-to-date documentation.
• Identify gaps in protection controls and drive upgrades or automation.
• Participate in security audits and on-call rotations.

Skills

Encryption strategy

Key management

Cloud security

Stakeholder collaboration

Security controls

Audits & compliance

HSM experience

Cloud platform experience

Education

Bachelor's degree in CS/IS or related field

Tools

AWS CloudHSM

Thales CipherTrust Manager

Thales HSM

Splunk

Grafana

Prometheus

Job description

Experian is seeking a Data Protection Engineer to lead encryption strategy across on‑prem and cloud environments. You will serve as SME for key management, HSMs, and certificate lifecycle, working with application, security, and audit teams to embed protection into projects.

Remote/hybrid options are available within designated hub regions and locales. A proven track record in encryption technologies and cloud security is essential.