Encryption Engineer

RRD is seeking a highly specialized Encryption and Enterprise Data Resiliency Engineer to ensure our organizations business availability and data security. The ideal candidate will design implement and maintain our continuous data protection modernized data backup systems and enterprise encryption architecture strictly adhering to resilience standards and ensuring data is backed by leveraging a Hardware Root of Trust. 
 

Responsibilities

Encryption & Key Operations Management

• Implement and manage Encryption Data Security Platforms that protect sensitive data at rest in accordance with RRD IT Governance policies.
• Administer centralized Key Management (KMS) and manage encryption policies across databases file systems and cloud storage where applicable.
• Support audit and compliance requirements (e.g. SOC2 PCI HIPAA) regarding data encryption.
• Manage Luna Hardware Security Module (HSM) partitions for high-assurance cryptographic operations (signing hashing and root key storage).

Backup & Data Protection

• Manage and optimize all Backup & Replication environments including virtual physical and cloud workloads.
• Oversee backup job scheduling monitoring and troubleshooting to ensure 100% success rates.
• Perform regular backup/restore testing to validate the recoverability of critical systems.
• Utilize Dell Avamar and Data Domain integration for high-efficiency variable-length deduplication and image-level proxy management.
• Manage Veeam Backup & Replication including protecting Salesforce data configuring Linux-based hardened repositories with immutability and enabling Instant VM Recovery.

Disaster Recovery & Continuity

• Administer technologies that extend real-time replication and continuous data protection (CDP).
• Update and maintain Disaster Recovery Plans (DRP) and lead quarterly failover drills to meet RTO/RPO targets.
• Ensure site-to-site connectivity and storage consistency during recovery scenarios.
• Implement Zerto Virtual Manager (ZVM) and Virtual Replication Appliances (VRAs) for real-time replication mapping.
• Configure the Zerto Journal for point-in-time recovery enabling the ability to rewind application stacks to the exact second before a ransomware or corruption event.
• Design Virtual Protection Groups (VPGs) for multi-tier applications to ensure write-order fidelity.
• Automate one-click failover and execute non-disruptive disaster recovery testing in isolated bubble networks or dedicated cloud tenants.
• Orchestrate seamless workload mobility including cloud migrations (Azure/AWS) cross-hypervisor replication (VMware to Hyper-V) and intra-cloud disaster recovery if required.

System Maintenance & Optimization

• Monitor storage capacity and performance related to backup repositories.
• Apply patches firmware updates and version upgrades to data protection and data encryption software.
• Collaborate with the Security Operations teams to integrate immutability and air-gapped backup solutions to combat ransomware.

Additional Responsibilities

• Participates in the design planning installation testing implementation and support of new hardware and software as well as evaluation and recommendation of current and potential vendors.
• Provides leadership and/or liaison for design efforts within specific business domains including best practices business alignment and requirements for supporting infrastructure.
• Responds to Service Desk referrals of end-user requests for help solving PC hardware software peripheral or production equipment-related problems or issues.
• Prioritizes problems based on severity urgency and impact on the business; tracks all outstanding incidents until successful resolution. 
• May hand off extremely complex technical problems to higher-level support or other IT department staff if required.
• Troubleshoots any technical difficulty with  hardware and software issues configurations and peripheral equipment.
• Works with enterprise support groups and outside vendors to resolve problems or issues.
• Coordinates through the change management process to move install upgrade remove and configure site IT assets and supporting infrastructure.
• Maintains the asset management system (additions/changes/deletions) for accurate tracking of all IT assets within the site(s).
• Identifies and recommends budgetary items based on infrastructure additions/improvements/removals.
• Supports and conducts routine audits of site IT assets and processes to ensure compliance with established company policies and procedures as well as compliance with Governmental regulations and policies.
• Performs other related duties and participates in special projects as assigned.

Qualifications :

• Bachelors degree in a Computer Science Information Systems or related field OR demonstrated ability to meet the job requirements through a comparable number of years of applicable work experience.
• 5-7 years of relevant work experience
• Knowledge with Veeam Avamar and Zerto
• Hands-on experience with CipherTrust Manager (or similar KMS/TDE tools)
• Strong understanding of VMware vSphere Microsoft Hyper-V and SAN/NAS storage
• Knowledge of TCP/IP DNS and Firewall rules as they relate to DR replication.
• Minor proficiency in AI integration with business processes such as information gathering inventory automation and process improvement
• Able to apply broad work experience and knowledge when analyzing complex problems. 
• Must be able consistently to identify critical elements variables and alternatives to develop solutions. 
• Must be able to organize/prioritize existing resources and incorporate new information as needed to implement the most effective solutions. 
• Able to communicate clearly and courteously with those who need to know about decisions/actions/problems. 
• Able to apply excellent functional computer knowledge in utilizing Microsoft Windows or other technical tools in completing assignments. 

Additional Information :

RRDs current salary range for this role is $78700 to $125900 / year. The salary range may be adjusted based on the applicable geographic location of the hired employee and the range may change in the future. At RRD it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions may vary based upon but not limited to education skills experience proficiency performance shift and location. Depending on the role in addition to base salary the total compensation package may also include participation in a bonus commission or incentive program. RRDs benefit offerings include medical dental and vision coverage paid time off disability insurance 401(k) with company match life insurance and other voluntary supplemental insurance coverages plus parental leave adoption assistance tuition assistance and employer/partner discounts.

#LI-MY1

#LI-Remote

All employment offers are contingent upon the successful completion of both a pre-employment background and drug screen.

RRD is an Equal Opportunity Employer including disability/veterans

Remote Work :

Yes

Employment Type :

Full-time