Data Security Engineer

Opportunity:
For a major financial services client, we are leading an enterprise data security strategy and implementation program focused on securing sensitive data through encryption, tokenisation, RBAC, data masking, DLP, and other advanced data protection techniques.

• Work closely with client stakeholders to understand technical requirements and applicable security, regulatory, and procedural controls.
• Develop security requirements and specifications for security policies.
• Identify appropriate security techniques such as Encryption (FPE, AES, Transparent) and Tokenisation (SST, Vaultless, Vault-based) using Protegrity, based on PII data classifications.
• Analyse upstream and downstream application dependencies to ensure proper configuration and application of security protocols.
• Maintain strong knowledge of data privacy regulations and compliance frameworks (GDPR, CCPA, HIPAA, SOC, NIST).
• Design, configure, and implement data security tool stacks such as Protegrity, Micro Focus Voltage, Imperva, Immuta, Privacera, and Thales.
• Provide regular updates for weekly status reports and project logs (issues, risks, action items, progress).
• Install, configure, and implement Data Protection Platforms across on‑premises and cloud environments.
• Design and deploy Protegrity Vaultless Tokenisation, Encryption, and Masking solutions to protect PII, PHI, PCI, and other sensitive data.
• Work with API security and Protegrity SDKs to support microservices and cloud‑native applications.
• Implement Protegrity Security Policies, User Access Controls, Key Management, and Data Discovery features.
• Troubleshoot and optimise Protegrity configurations for performance and scalability.
• Develop and maintain technical documentation for data security implementations.
• Train and mentor technical teams on data security tools, standards, and policies.

Experience Required

• 8+ years of industry experience implementing data security and compliance requirements.
• 4+ years designing and implementing data security policies, controls, and governance.
• 2+ years with cloud platforms (AWS, Azure, GCP) and cloud‑native security services.
• Strong conceptual and hands‑on experience with data protection techniques: encryption, tokenisation, data masking, RBAC/ABAC, auditing, and monitoring.
• Experience with leading data security tools such as Protegrity, Thales Cipher Trust (Vormetric), Open Text Voltage, etc.
• Deep understanding of cloud architecture with emphasis on cloud security.
• Experience administering Data Security/Privacy/Governance platforms, including policy configuration, upgrades, and patch management.
• Proficiency in encryption techniques (AES, FPE, TDE, PKI) and tokenisation frameworks using Protegrity (must‑have).
• Experience with Key Management Solutions (KMS, HSMs, Vaults).
• Hands‑on integration of data security in cloud environments (AWS KMS, Azure Key Vault, GCP KMS).
• Strong communication skills, both written and verbal, with the ability to engage business and technical stakeholders.
• Ability to multitask, work independently, and coordinate with onsite teams.
• Bachelor’s degree in computer science, Information Systems, Cybersecurity, or a related field (or equivalent experience).

Cloud Hybrid is an equal opportunity employer inclusive of female, minority, disability and veterans, (M/F/D/V). Hiring, promotion, transfer, compensation, benefits, discipline, termination and all other employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, age, disability, national origin, citizenship/immigration status, veteran status or any other protected status. Cloud Hybrid will not make any posting or employment decision that does not comply with applicable laws relating to labor and employment, equal opportunity, employment eligibility requirements or related matters.

Nor will Cloud Hybrid require in a posting or otherwise U.S. citizenship or lawful permanent residency in the U.S. as a condition of employment except as necessary to comply with law, regulation, executive order, or federal, state, or local government contract.