Crypto Engineer / Expert
The primary function and role of the Security Architect is to design and implement data security for applications at various levels: application level, data/database level, file level for a variety of platforms [java, .net, C/C++], operating systems [linux, windows, solaris, AIX] and databases [oracle, DB2, MS-SQL], and Big Data frameworks such as Hadoop. Key skillsets: * Expertise in data security mechanisms with a deep understanding of cryptographic techniques and protocols; examples: symmetric and asymmetric encryption algorithms such as AES, RSA; hashing algorithms such as SHA/HMAC etc.; data in transit protection protocols such as TLS/IPSec* Experience implementing data security solutions for applications (Java, .net, web services), and databases (Oracle, MS-SQL - transparent encryption and integration with external key management systems such as Hardware Security Modules)* Deep understanding of key-management protocols and principles* Expertise in data-protection software and hardware solutions; Common vendors include: SafeNet/Gemalto, Thales, Vormetric; Transparent solutions include SQL and Oracle TDE* Deep understanding of data-auditing using technologies such as IBM Guardium and Imperva* Strong experience in Threat Modeling of complex security systems using techniques such as STRIDE, DREAD, OCTAVE* Experience in delivering comprehensive architecture specifications for complex security solutions* Strong knowledge of Data protection technologies such as: Hardware Security Modules; Technologies from SafeNet, HP-Voltage, Thales, and Vormetric; Transparent encryption technologies from Microsoft, IBM, and Oracle* Strong knowledge of cryptographic standards and algorithms such as AES, SHA, DES; PKCS standards* Strong knowledge of data security standards - FFIEC, PCI-DSS, GLBA and experience implementing solutions beyond analysis and assessments that meet requisite compliance Education/Experience * Bachelor degree* 8-10 years overall experience preferred; fewer years with focus on data security will be considered too Other skills * Verbal and written communication skills, problem solving skills, customer service and interpersonal skills (Required)* Strong ability to work independently and manage one's time (Required)* Strong leadership and mentoring skills necessary to provide support and constructive performance feedback (Required)* Strong knowledge of computer hardware and software (Required)* Strong knowledge of the practical application of engineering science, technology, and applied cryptography (Typically required)* Strong knowledge of laws, legal codes, government regulations, agency rules and the democratic political process (Required)* Exercises independent judgement with minimal direction from management Major Job Duties and Responsibilities * Architecture, engineering, and support of data security solutions from pre-deployment through deployment and post* Train staff and users and promote data security awareness to ensure system security* Review and approve plans to safeguard sensitive data against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs* Triage issues working with Vendors and Development and engineering resources* Review and approve the implementation of Data protection plans and designs Company Description: infoedge is a rapidly growing, dynamic, management consulting firm that helps our clients effectively use information for success in healthcare, financial services, products and services, we help our clients improve their customers' experiences, drive profitability, innovate, or manage risk. Our multidisciplinary team offers a variety of services to help our clients succeed by design. We work with the world's leading brands and organizations and deliver impactful, innovative solutions. We offer a highly competitive compensation package that rewards high performers and provides sector leading benefits and a lively, agile, collaborative work environment.