Senior Data Security Engineer
Requisition 268815
Location: All
The Richmond Fed is the proud home of the Federal Reserve's National IT organization-a nationwide team delivering technology solutions and support across the Federal Reserve System. Many National IT employees are located in Richmond, while others are based across the U.S. at other Federal locations.
When you join our team, you'll become part of a culture that welcomes differences, cares about our communities, and empowers each other to lead from where we are to make things better.
Bring your passion and we'll provide challenging and purposeful careers in a variety of fields, opportunities to grow and a wide range of benefits and perks that support your health and wealth. It's all part of what makes #MyRichmondFed a great place to work!
About the Opportunity
The Encryption and Key Management product team has an immediate opening for a Senior Data Security Engineer.
Work in a dynamic Encryption and Key Management product team to support and automate data security tools and systems. Be at the forefront of new crypto technologies and tools.
What You Will Do:

• Enforce data security standards including obfuscation, tokenization, and encryption
• Deploy and maintain various data security tools and systems in a complex on-prem and hybrid cloud environments
• Improve and reduce manual activities through automation, guidance and documentation

• Consult with other members of product team and end users to identify data security and PKI requirements and develop requirements documentation
• Contribute to the technical direction on all areas of data security and PKI architecture, including policies, standards, strategies, automation and governance
• Provide guidance to key stakeholders on PKI lifecycle, processes and procedures
• Mentor and develop staff by providing training on technical topics and insight into areas outside of their expertise

Qualifications:

• Bachelor's Degree or equivalent experience with 5 years of relevant work experience.
• In depth experience with data security protection use cases (tokenization, masking, redaction, obfuscation, encryption, etc) and vendors (e.g. Thales Vormetric, Fortanix, Protegrity)
• A solid understanding of Public Key Infrastructure (PKI) including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority

• Expertise in designing, engineering, implementing, operating and supporting a Cryptographic Infrastructure consisting of such elements as; Enterprise Key Management System (EKMS), Public Key Infrastructure (PKI), Validation Authority (VA), Hardware Security Modules (HSM) for Data-at-Rest, Data-in-Transit and Data-in-Use.
• A solid understanding of Windows/LINUX OS and AWS environment, particularly crypto implementations
• Familiarity with popular databases on both windows and UNIX platforms, including Oracle and MS SQL
• Familiarity with common identity, authentication, and directory services, such as Active Directory and LDAP
• Demonstrable ability to solve problems and automate tasks programmatically
• Familiarity with infrastructure as code tools (CloudFormation, Azure Resource Manager, Terraform)

• CISSP, Certified Cloud Security Professional (CCSP) and AWS Cloud certification desirable
• Experience developing solutions in an iterative (Agile) approach

Discover the Reason Why So Many People Love It Here!
When you join Federal Reserve's National IT organization, not only will you find a challenging and purposeful career, you'll also have access to a wide range of benefits and perks that support your health and wealth, including:

• Great medical benefits
• Pension and 401(k) with employer match
• Generous paid time off
• Tuition reimbursement
• Employee resource networks
• Paid volunteer leave
• Flexible work options
• Onsite amenities that make working here fun

Other Requirements and Considerations:

• Candidates should review the Bank's Employee Code of Conduct to ensure compliance with conflict of interest rules and personal investment restrictions. The Code is available on the About Us, Careers webpage at www.richmondfed.org .
• Sponsorship is not available for this role.
• Selected candidate is subject to special background check procedures.
• Salary offered will be based on the job responsibilities and the individual's knowledge, skills, and experience as defined in the job qualifications/experience.

The Federal Reserve Bank of Richmond provides equal opportunity to all individuals without regard to race, sex, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, or genetic information.