Technical Consultant - Data & Quantum Security

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. Work at the forefront of cryptographic modernization — one of the most critical and fast-moving areas in enterprise security. Opportunity to define the organization's quantum-safe security posture before the threat window closes. Collaborative culture with elite engineers, privacy counsel, and compliance professionals. Competitive compensation, flexible work model, and investment in your professional development. We are seeking a seasoned Data Security Architect to lead the design, strategy, and implementation of enterprise-grade data protection solutions. This is a senior individual-contributor and advisory role responsible for shaping the cryptographic and data security posture of the organization — from classical PKI and key management to quantum-safe cryptographic transformation at scale. You will work across engineering, compliance, and executive stakeholders to define frameworks, evaluate emerging threats, and drive data security modernization programs that protect our most sensitive assets — today and in a post-quantum world. Key Responsibilities Data Protection Strategy & Frameworks Design and own the enterprise Data Protection Architecture — covering data at rest, in transit, and in use across on-premises, cloud, and hybrid environments. Develop and maintain a Data Security Reference Architecture aligned with industry frameworks (NIST CSF, NIST SP 800-53, ISO 27001, DPDPA, GDPR, CCPA, PCI-DSS). Define data classification policies, protection controls, and governance standards across structured, unstructured, and streaming data. Architect Data Loss Prevention (DLP), tokenization, format-preserving encryption (FPE), and data masking solutions at enterprise scale. Develop capabilities to implement security for enterprise data security solutions e.g. Microsoft Purview, Varonis, Palo Alto, Cyera etc. Lead data security risk assessments, threat modeling exercises, and control gap analyses. Quantum-Safe Discovery & Cryptographic Transformation Lead the organization's Post-Quantum Cryptography (PQC) readiness program — from cryptographic inventory to full migration. Conduct Cryptographic Bill of Materials (CBOM) discovery across applications, APIs, data stores, and infrastructure to identify quantum-vulnerable assets. Collaborate with application owners and platform teams to prioritize and execute cryptographic transformation roadmaps. This role can be performed from anywhere in the US. 10+ years of experience in information security, with 5+ years in a security architecture or cryptography-focused role. Deep expertise in cryptographic principles — symmetric/asymmetric algorithms, key derivation, digital signatures, certificate standards (X.509), and protocol-level security (TLS 1.3, SSH, IPsec). Hands-on experience designing and implementing PKI infrastructure, including CA hierarchies, HSM integration, and certificate policy governance. Demonstrated experience with KMS architecture across cloud and on-premises environments, including HSM-backed key material management. Practical experience with CLM platforms (Venafi, Keyfactor, AppViewX, DigiCert, or equivalent) and certificate automation at scale. Working knowledge of Post-Quantum Cryptography landscape, NIST PQC standardization process, and CBOM tooling. Proficiency with DLP, tokenization, data masking, and encryption technologies in enterprise environments. Experience architecting across major cloud platforms (AWS, Azure, GCP) with cloud-native security services. Strong knowledge of relevant compliance frameworks: NIST SP 800-57, PCI-DSS, GDPR, HIPAA, FedRAMP, SOC 2. Excellent communication skills — ability to translate complex cryptographic concepts to executive, technical, and compliance audiences. Experience with quantum-safe migration tooling (IBM Quantum Safe, KeyFactor, Entrust, Palo ALto, Thales or equivalent). Familiarity with CBOM/SBOM tooling and cryptographic asset discovery platforms. Background in zero-trust architecture with strong identity and workload certificate integration. Contributions to or engagement with NIST, ETSI, IETF, or Cloud Security Alliance (CSA) working groups. Experience in regulated industries (Financial Services, Healthcare, Defense, Government). Familiarity with FIPS 140-2/3 validation processes and cryptographic module evaluation. United States Consulting Hybrid Professional No City, US No City (0147) International Business Machines Corporation Algorithms Amazon Web Services Architecture Automation Communication Cryptography Data Security Defense Financial Services Government Healthcare Information Security Infrastructure Integration Legal Discovery Management National Institute of Standards and Technology Security Validation Azure Google Cloud Platform Scaled Agile Framework Encryption Health Insurance Portability and Accountability Act General Data Protection Regulation Security Services Cloud security Compliance Security Operations Center Data Loss Prevention Hardware Security Module Federal Risk and Authorization Management Program Public Key Infrastructure Data Masking Scale Tokenization X.509 Cloud Platforms Policy Governance Tooling AWS Key Management Service Customer Lifecycle Management Certified Safety Auditor Transport Layer Security Federal Information Processing Standards Internet Protocol Security Secure Shell Protocol