Note: The job is a remote job and is open to candidates in USA. IBM is seeking a Technical Consultant to lead enterprise data protection architecture and security modernization. The role focuses on cryptographic security, post-quantum readiness, and protecting sensitive data across cloud, on-premises, and hybrid environments.
Responsibilities
- Design and own the enterprise Data Protection Architecture — covering data at rest, in transit, and in use across on-premises, cloud, and hybrid environments
- Develop and maintain a Data Security Reference Architecture aligned with industry frameworks (NIST CSF, NIST SP 800-53, ISO 27001, DPDPA, GDPR, CCPA, PCI-DSS)
- Define data classification policies, protection controls, and governance standards across structured, unstructured, and streaming data
- Architect Data Loss Prevention (DLP), tokenization, format-preserving encryption (FPE), and data masking solutions at enterprise scale
- Develop capabilities to implement security for enterprise data security solutions e.g. Microsoft Purview, Varonis, Palo Alto, Cyera etc
- Lead data security risk assessments, threat modeling exercises, and control gap analyses
- Lead the organization's Post-Quantum Cryptography (PQC) readiness program — from cryptographic inventory to full migration
- Conduct Cryptographic Bill of Materials (CBOM) discovery across applications, APIs, data stores, and infrastructure to identify quantum-vulnerable assets
- Collaborate with application owners and platform teams to prioritize and execute cryptographic transformation roadmaps
Skills
- 10+ years of experience in information security, with 5+ years in a security architecture or cryptography-focused role
- Deep expertise in cryptographic principles — symmetric/asymmetric algorithms, key derivation, digital signatures, certificate standards (X.509), and protocol-level security (TLS 1.3, SSH, IPsec)
- Hands-on experience designing and implementing PKI infrastructure, including CA hierarchies, HSM integration, and certificate policy governance
- Demonstrated experience with KMS architecture across cloud and on-premises environments, including HSM-backed key material management
- Practical experience with CLM platforms (Venafi, Keyfactor, AppViewX, DigiCert, or equivalent) and certificate automation at scale
- Working knowledge of Post-Quantum Cryptography landscape, NIST PQC standardization process, and CBOM tooling
- Proficiency with DLP, tokenization, data masking, and encryption technologies in enterprise environments
- Experience architecting across major cloud platforms (AWS, Azure, GCP) with cloud-native security services
- Strong knowledge of relevant compliance frameworks: NIST SP 800-57, PCI-DSS, GDPR, HIPAA, FedRAMP, SOC 2
- Excellent communication skills — ability to translate complex cryptographic concepts to executive, technical, and compliance audiences
- Experience with quantum-safe migration tooling (IBM Quantum Safe, KeyFactor, Entrust, Palo ALto, Thales or equivalent)
- Familiarity with CBOM/SBOM tooling and cryptographic asset discovery platforms
- Background in zero-trust architecture with strong identity and workload certificate integration
- Contributions to or engagement with NIST, ETSI, IETF, or Cloud Security Alliance (CSA) working groups
- Experience in regulated industries (Financial Services, Healthcare, Defense, Government)
- Familiarity with FIPS 140-2/3 validation processes and cryptographic module evaluation
Benefits
- Flexible work model; the role can be performed from anywhere in the US.
- Investment in your professional development.
Company Overview
Company H1B Sponsorship