Data Protection Engineer

We are seeking a highly skilled Data Protection Engineer with strong expertise in AWS, Cryptography, and Cloud Networking to design and implement secure data protection solutions across cloud environments. The ideal candidate will be responsible for safeguarding sensitive data through encryption, secure network design, and compliance-driven security frameworks.

Key Responsibilities

• Design and implement data protection strategies across cloud and distributed systems.
• Develop and manage encryption solutions (data-at-rest, data-in-transit, and key management).
• Work with AWS security services such as KMS, IAM, CloudHSM, Secrets Manager, and Shield.
• Architect and secure cloud networking (VPCs, subnets, VPNs, PrivateLink, security groups, NACLs).
• Ensure compliance with industry standards such as ISO 27001, SOC2, GDPR, and other regulatory frameworks.
• Implement data loss prevention (DLP) mechanisms and monitoring tools.
• Conduct security risk assessments, vulnerability analysis, and threat modeling.
• Collaborate with DevOps and engineering teams to embed security best practices into CI/CD pipelines.
• Monitor and respond to security incidents related to data breaches or vulnerabilities.
• Maintain documentation of security architectures, policies, and procedures.

Required Skills & Qualifications

• Strong experience with AWS cloud platform and security services.
• In-depth knowledge of cryptography principles (encryption algorithms, hashing, PKI, TLS/SSL).
• Hands-on experience with key management systems and secure key lifecycle management.
• Strong understanding of cloud networking and security architecture.
• Experience with data protection, DLP tools, and access control mechanisms.
• Familiarity with network security protocols, firewalls, and intrusion detection systems.
• Proficiency in scripting or programming (Python, Bash, or similar).
• Strong analytical, problem-solving, and troubleshooting skills.

Preferred Qualifications

• Experience with multi-cloud environments (Azure, GCP).
• Knowledge of Zero Trust architecture and secure access frameworks.
• Familiarity with container security (Docker, Kubernetes).
• Relevant certifications such as AWS Certified Security Specialty, CISSP, CISM, or CEH.
• Experience with security automation and MLOps/DevSecOps practices.

Good to Have

• Experience in financial services, healthcare, or other regulated industries.
• Exposure to data privacy tools and frameworks.
• Understanding of secure software development lifecycle (SSDLC).