Data Security Engineer to design, implement, and manage enterprise data protection and security solutions.
The ideal candidate will have strong expertise in Cohesity, PKI (Public Key Infrastructure) with tools like Venafi, and Azure Cloud Security, along with a broader understanding of data protection, encryption, identity security, and compliance frameworks.
Responsibilities
Cohesity Data Protection & Backup Security:Design, implement, and manage Cohesity backup and data management solutions.
Ensure secure backup architecture including immutability, ransomware protection, and disaster recovery.
Implement backup security controls, access governance, and disaster recovery capabilities.
Develop data protection controls across on premises, hybrid, and cloud environments.
PKI & Certificate Management (Venafi):Design and manage enterprise PKI infrastructure.
Ensure compliance with certificate governance and cryptographic standards.
Manage HSM integrations and key protection strategies.
Azure Cloud Security:
Implement and maintain Azure security controls across IaaS, PaaS, and SaaS.
Configure and manage Azure Key Vault for key and secret management.
Utilize Azure Defender / Microsoft Defender for Cloud.
Enforce identity and access management via Azure AD, RBAC, and Conditional Access.
Data Protection & Governance:Implement encryption controls for data at rest and in transit.
Define and maintain data classification and retention policies.
Support compliance requirements including GDPR, HIPAA, PCI DSS, ISO 27001, SOC2, NIST, and DORA.
Mandatory Skills (Must Have)
Expertise in Cohesity (Backup, recovery, data protection, ransomware protection).
Strong understanding of PKI fundamentals and operations.
Experience with Venafi (Certificate lifecycle management and automation).
Proficient in Azure Cloud Security, specifically Azure AD.
Knowledge of Compliance Management and Assessments principles and practices
Preferred Skills (Good to Have)
Experience with additional cloud security tools and frameworks.
Familiarity with data loss prevention (DLP) technologies.Knowledge of security compliance frameworks beyond those listed in mandatory skills.
Certifications in relevant areas (e.g., CISSP, CISM, Azure Security Engineer).
Never miss an opportunity! Create an alert based on the job you applied for.