Encryption Engineer

Encryption Engineer

RRD is seeking a highly specialized Encryption and Enterprise Data Resiliency Engineer to ensure our organization's business availability and data security. The ideal candidate will design, implement, and maintain our continuous data protection, modernized data backup systems, and enterprise encryption architecture, strictly adhering to resilience standards and ensuring data is backed by leveraging a Hardware Root of Trust.

Responsibilities

Encryption & Key Operations Management

• Implement and manage Encryption Data Security Platforms that protect sensitive data at rest in accordance with RRD IT Governance policies.
• Administer centralized Key Management (KMS) and manage encryption policies across databases, file systems, and cloud storage where applicable.
• Support audit and compliance requirements (e.g., SOC2, PCI, HIPAA) regarding data encryption.
• Manage Luna Hardware Security Module (HSM) partitions for high-assurance cryptographic operations (signing, hashing, and root key storage).

Backup & Data Protection

• Manage and optimize all Backup & Replication environments, including virtual, physical, and cloud workloads.
• Oversee backup job scheduling, monitoring, and troubleshooting to ensure 100% success rates.
• Perform regular backup/restore testing to validate the recoverability of critical systems.
• Utilize Dell Avamar and Data Domain integration for high-efficiency variable-length deduplication and image-level proxy management.
• Manage Veeam Backup & Replication, including protecting Salesforce data, configuring Linux-based hardened repositories with immutability, and enabling Instant VM Recovery.

Disaster Recovery & Continuity

• Administer technologies that extend real-time replication and continuous data protection (CDP).
• Update and maintain Disaster Recovery Plans (DRP) and lead quarterly failover drills to meet RTO/RPO targets.
• Ensure site-to-site connectivity and storage consistency during recovery scenarios.
• Implement Zerto Virtual Manager (ZVM) and Virtual Replication Appliances (VRAs) for real-time replication mapping.
• Configure the Zerto Journal for point-in-time recovery, enabling the ability to "rewind" application stacks to the exact second before a ransomware or corruption event.
• Design Virtual Protection Groups (VPGs) for multi-tier applications to ensure write-order fidelity.
• Automate one-click failover and execute non-disruptive disaster recovery testing in isolated "bubble" networks or dedicated cloud tenants.
• Orchestrate seamless workload mobility, including cloud migrations (Azure/AWS), cross-hypervisor replication (VMware to Hyper-V), and intra-cloud disaster recovery if required.

System Maintenance & Optimization

• Monitor storage capacity and performance related to backup repositories.
• Apply patches, firmware updates, and version upgrades to data protection and data encryption software.
• Collaborate with the Security Operations teams to integrate immutability and air-gapped backup solutions to combat ransomware.

Additional Responsibilities

• Participates in the design, planning, installation, testing, implementation, and support of new hardware and software as well as evaluation and recommendation of current and potential vendors.
• Provides leadership and/or liaison for design efforts within specific business domains, including best practices, business alignment, and requirements for supporting infrastructure.
• Responds to Service Desk referrals of end-user requests for help solving PC hardware, software, peripheral, or production equipment-related problems or issues.
• Prioritizes problems based on severity, urgency, and impact on the business; tracks all outstanding incidents until successful resolution.
• May hand off extremely complex technical problems to higher-level support or other IT department staff if required.
• Troubleshoots any technical difficulty with hardware and software issues, configurations, and peripheral equipment.
• Works with enterprise support groups and outside vendors to resolve problems or issues.
• Coordinates through the change management process to move, install, upgrade, remove and configure site IT assets and supporting infrastructure.
• Maintains the asset management system (additions/changes/deletions) for accurate tracking of all IT assets within the site(s).
• Identifies and recommends budgetary items based on infrastructure additions/improvements/removals.
• Supports and conducts routine audits of site IT assets and processes to ensure compliance with established company policies and procedures, as well as compliance with Governmental regulations and policies.
• Performs other related duties and participates in special projects as assigned.

Qualifications

• Bachelor's degree in a Computer Science, Information Systems or related field OR demonstrated ability to meet the job requirements through a comparable number of years of applicable work experience.
• 5-7 years of relevant work experience
• Knowledge with Veeam, Avamar and Zerto
• Hands-on experience with CipherTrust Manager (or similar KMS/TDE tools)
• Strong understanding of VMware, vSphere, Microsoft Hyper-V, and SAN/NAS storage
• Knowledge of TCP/IP, DNS, and Firewall rules as they relate to DR replication.
• Minor proficiency in AI integration with business processes such as information gathering, inventory, automation and process improvement
• Able to apply broad work experience and knowledge when analyzing complex problems.
• Must be able consistently to identify critical elements, variables, and alternatives to develop solutions.
• Must be able to organize/prioritize existing resources and incorporate new information, as needed, to implement the most effective solutions.
• Able to communicate clearly and courteously with those who need to know about decisions/actions/problems.
• Able to apply excellent functional computer knowledge in utilizing Microsoft Windows or other technical tools in completing assignments.

Additional Information

RRD's current salary range for this role is $78,700 to $125,900 / year. The salary range may be adjusted based on the applicable geographic location of the hired employee, and the range may change in the future. At RRD, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions may vary based upon, but not limited to education, skills, experience, proficiency, performance, shift and location. Depending on the role, in addition to base salary, the total compensation package may also include participation in a bonus, commission or incentive program. RRD's benefit offerings include medical, dental, and vision coverage, paid time off, disability insurance, 401(k) with company match, life insurance and other voluntary supplemental insurance coverages, plus parental leave, adoption assistance, tuition assistance and employer/partner discounts.