Data Security Engineer

Key Skills

• Cloud data security

• AWS KMS

• AWS Secrets Manager

• AWS Private CA / Certificate Manager

• PKI and certificate lifecycle management

• SSL/TLS certificates

• Cryptographic key management

• Cloud-native encryption controls

• Secure secrets and credential management

• S3 security

• Data-access controls

• IAM integration

• Security logging

• Security/audit evidence management

• Certificate expiry monitoring

• Key/certificate inventory management

Responsibilities

• Operate cloud-based data protection and cryptographic security controls.

• Manage AWS KMS and Secrets Manager-related security activities.

• Support encryption and secure key-management requirements.

• Manage end-to-end certificate lifecycle activities.

• Maintain certificate, key and cryptographic asset inventories.

• Monitor certificate validity and expiration.

• Manage certificate issuance, renewal and revocation processes.

• Ensure private keys and secrets are maintained using approved secure mechanisms.

• Coordinate data-access security controls with IAM and cloud teams.

• Support data-security incidents, audit evidence and compliance activities.

• Maintain operational documentation for data and cryptographic security controls.

Preferred Certifications

• AWS Security / AWS Solutions Architect

• CISSP or CCSP

• PKI / cryptography-related certification or demonstrated implementation experiencer