Note: The job is a remote job and is open to candidates in USA. IBM is seeking a Technical Consultant to lead enterprise data protection architecture and security modernization. The role focuses on cryptographic security, post-quantum readiness, and protecting sensitive data across cloud, on-premises, and hybrid environments.

Responsibilities

• Design and own the enterprise Data Protection Architecture — covering data at rest, in transit, and in use across on-premises, cloud, and hybrid environments
• Develop and maintain a Data Security Reference Architecture aligned with industry frameworks (NIST CSF, NIST SP 800-53, ISO 27001, DPDPA, GDPR, CCPA, PCI-DSS)
• Define data classification policies, protection controls, and governance standards across structured, unstructured, and streaming data
• Architect Data Loss Prevention (DLP), tokenization, format-preserving encryption (FPE), and data masking solutions at enterprise scale
• Develop capabilities to implement security for enterprise data security solutions e.g. Microsoft Purview, Varonis, Palo Alto, Cyera etc
• Lead data security risk assessments, threat modeling exercises, and control gap analyses
• Lead the organization's Post-Quantum Cryptography (PQC) readiness program — from cryptographic inventory to full migration
• Conduct Cryptographic Bill of Materials (CBOM) discovery across applications, APIs, data stores, and infrastructure to identify quantum-vulnerable assets
• Collaborate with application owners and platform teams to prioritize and execute cryptographic transformation roadmaps

Skills

• 10+ years of experience in information security, with 5+ years in a security architecture or cryptography-focused role
• Deep expertise in cryptographic principles — symmetric/asymmetric algorithms, key derivation, digital signatures, certificate standards (X.509), and protocol-level security (TLS 1.3, SSH, IPsec)
• Hands-on experience designing and implementing PKI infrastructure, including CA hierarchies, HSM integration, and certificate policy governance
• Demonstrated experience with KMS architecture across cloud and on-premises environments, including HSM-backed key material management
• Practical experience with CLM platforms (Venafi, Keyfactor, AppViewX, DigiCert, or equivalent) and certificate automation at scale
• Working knowledge of Post-Quantum Cryptography landscape, NIST PQC standardization process, and CBOM tooling
• Proficiency with DLP, tokenization, data masking, and encryption technologies in enterprise environments
• Experience architecting across major cloud platforms (AWS, Azure, GCP) with cloud-native security services
• Strong knowledge of relevant compliance frameworks: NIST SP 800-57, PCI-DSS, GDPR, HIPAA, FedRAMP, SOC 2
• Excellent communication skills — ability to translate complex cryptographic concepts to executive, technical, and compliance audiences
• Experience with quantum-safe migration tooling (IBM Quantum Safe, KeyFactor, Entrust, Palo ALto, Thales or equivalent)
• Familiarity with CBOM/SBOM tooling and cryptographic asset discovery platforms
• Background in zero-trust architecture with strong identity and workload certificate integration
• Contributions to or engagement with NIST, ETSI, IETF, or Cloud Security Alliance (CSA) working groups
• Experience in regulated industries (Financial Services, Healthcare, Defense, Government)
• Familiarity with FIPS 140-2/3 validation processes and cryptographic module evaluation

Benefits

• Flexible work model; the role can be performed from anywhere in the US.
• Investment in your professional development.

Company Overview

Company H1B Sponsorship