Technical Consultant - Data & Quantum Security joins the IBM Consulting team as a senior individual-contributor and advisory role. You will lead the design, strategy, and implementation of enterprise-grade data protection solutions, focusing on cryptographic modernization and quantum-safe security postures. Day-to-day responsibilities include designing data protection architectures for hybrid environments, developing security reference architectures aligned with NIST and ISO standards, and leading post-quantum cryptography readiness programs. You will perform cryptographic inventory, threat modeling, and migration planning. Required expertise includes deep knowledge of symmetric/asymmetric algorithms, PKI infrastructure, HSM integration, and KMS architecture. You must be proficient with tools like Venafi, Keyfactor, and cloud-native security services across AWS, Azure, and GCP. The role solves the critical business problem of protecting sensitive assets against emerging quantum threats.
Design and own the enterprise data protection architecture for data at rest, in transit, and in use.
Develop a data security reference architecture aligned with industry frameworks like NIST, ISO 27001, and GDPR.
Architect enterprise-scale solutions for data loss prevention, tokenization, format-preserving encryption, and data masking.
Lead the organization's post-quantum cryptography readiness program and execute cryptographic transformation roadmaps.
Conduct cryptographic bill of materials discovery to identify quantum-vulnerable assets across applications and infrastructure.
Lead data security risk assessments, threat modeling exercises, and control gap analyses.
Manage PKI infrastructure, including CA hierarchies, HSM integration, and certificate policy governance.
What we're looking for
Associate's Degree or College Diploma.
10+ years of experience in information security.
5+ years of experience in a security architecture or cryptography-focused role.
Deep expertise in cryptographic principles, including symmetric/asymmetric algorithms, key derivation, digital signatures, X.509 standards, and TLS 1.3, SSH, and IPsec.
Hands-on experience designing and implementing PKI infrastructure, HSM integration, and KMS architecture across cloud and on-premises environments.
Practical experience with CLM platforms (e.g., Venafi, Keyfactor, AppViewX, DigiCert) and certificate automation at scale.
Proficiency with DLP, tokenization, data masking, and encryption technologies across AWS, Azure, and GCP.
Experience with quantum-safe migration tooling, CBOM/SBOM tools, and zero-trust architecture (preferred).
AI Security
LLM
Generative AI
Python
AWS
Azure
GCP
MLOps
MLflow
Kubeflow
SageMaker
Vertex AI
RAG
Threat Modeling
MITRE ATLAS
OWASP LLM Top 10
NIST AI RMF
ISO/IEC 42001
EU AI Act
IAM