Data Security Engineer(Cohesity, PKI/Venafi, Azure Security)

Job Title: Data Security Engineer / Specialist (Cohesity, PKI/Venafi, Azure Security)

Location: OR Portland 

Years of Experience-10 Years

Job Summary

We are seeking a highly skilled Data Security Engineer to design, implement, and manage enterprise data protection and security solutions. The ideal candidate will have strong expertise in Cohesity, PKI (Public Key Infrastructure) with tools like Venafi, and Azure Cloud Security, along with a broader understanding of data protection, encryption, identity security, and compliance frameworks.

Responsibilities

• Cohesity Data Protection & Backup Security:
• Design, implement, and manage Cohesity backup and data management solutions.
• Ensure secure backup architecture including immutability, ransomware protection, and disaster recovery.
• Implement backup security controls, access governance, and disaster recovery capabilities.
• Develop data protection controls across on premises, hybrid, and cloud environments.
• PKI & Certificate Management (Venafi):
• Design and manage enterprise PKI infrastructure.
• Ensure compliance with certificate governance and cryptographic standards.
• Manage HSM integrations and key protection strategies.
• Azure Cloud Security:
• Implement and maintain Azure security controls across IaaS, PaaS, and SaaS.
• Configure and manage Azure Key Vault for key and secret management.
• Utilize Azure Defender / Microsoft Defender for Cloud.
• Enforce identity and access management via Azure AD, RBAC, and Conditional Access.
• Data Protection & Governance:
• Implement encryption controls for data at rest and in transit.
• Define and maintain data classification and retention policies.
• Support compliance requirements including GDPR, HIPAA, PCI DSS, ISO 27001, SOC2, NIST, and DORA.

Mandatory Skills (Must Have)

• Expertise in Cohesity (Backup, recovery, data protection, ransomware protection).
• Strong understanding of PKI fundamentals and operations.
• Experience with Venafi (Certificate lifecycle management and automation).
• Proficient in Azure Cloud Security, specifically Azure AD.
• Knowledge of Compliance Management and Assessments principles and practices.

Preferred Skills (Good to Have)

• Experience with additional cloud security tools and frameworks.
• Familiarity with data loss prevention (DLP) technologies.
• Knowledge of security compliance frameworks beyond those listed in mandatory skills.
• Certifications in relevant areas (e.g., CISSP, CISM, Azure Security Engineer).

Qualifications

Bachelor''s degree in Computer Science, Information Technology, or a related field. A minimum of 7 10 years of experience in data security, with a focus on enterprise level solutions. Strong analytical and problem solving skills, along with excellent communication and collaboration abilities.