Data Encryption and PKI

Led and supported a large-scale enterprise data security initiative focused on implementing, managing, and modernizing Thales Vormetric Encryption across Production and Non-Production environments. The project ensured compliance with organizational security policies, regulatory standards, and evolving infrastructure requirements by encrypting data at rest across heterogeneous platforms, databases, operating systems, and cloud environments.

  • Led a large-scale enterprise data-at-rest encryption program implementing and modernizing Thales Vormetric / CipherTrust Transparent Encryption (CTE) across Production and Non-Production environments to strengthen organizational security posture and regulatory compliance.
  • Architected and deployed centralized encryption and key management using CipherTrust Manager, enabling secure lifecycle management of encryption keys and policies across heterogeneous infrastructure.
  • Designed and implemented enterprise encryption architecture protecting structured and unstructured data across Linux, Windows, NAS storage, and cloud platforms.
  • Secured critical enterprise databases including DB2, Sybase, PostgreSQL, MSSQL, Oracle, and MongoDB, along with file systems across Linux and Windows DFS environments using advanced encryption policies.
  • Directed encryption deployment across 900+ enterprise servers and AWS EC2 environments, ensuring scalable protection for sensitive data across hybrid infrastructure.
  • Led the migration of CTE agents and KMIP clients from legacy Vormetric DSM platforms to modern CipherTrust Manager, improving platform scalability and centralized security governance.
  • Managed platform lifecycle operations including CipherTrust Manager upgrades, agent updates, certificate management, and compatibility with Linux kernel and Windows OS changes.
  • Implemented automation frameworks using Jenkins to streamline agent deployment, host re-signing, policy enforcement, and RHEL in-place upgrades, reducing operational risk and improving deployment efficiency.
  • Enabled secure infrastructure modernization initiatives, supporting Active Directory transformation, OS upgrades, and standardized JDK management while maintaining continuous encryption coverage.