GCP Cloud Data Protection SME/ Cloud Crypto Architect

Job Title: GCP Data Encryption / Cloud Crypto Architect
Location: Hybrid 3 Days Onsite
Primary Locations: Atlanta, GA; Phoenix, AZ
Other Locations: Sunrise, FL; Salt Lake City, UT; Palo Alto, CA; New York City, NY
Duration: 12 Months
Rate: $70/hr. on W2

Job Description: Cloud Crypto Architect
We are seeking an experienced Cloud Crypto Architect with deep expertise in data encryption and cloud-native cryptographic services. This role will support AMEXs cloud data protection initiatives, ensuring secure key management and encryption practices across multi-cloud environments, with a primary focus on Google Cloud Platform (GCP).

Key Responsibilities:

• Architect, prototype, and build GitHub and Terraform modules for:
• Key Management Systems (KMS)
• Keys and Certificates
• Certificate Authorities
• Cryptographic Assets

• Implement secure key exchange mechanisms (symmetric & asymmetric) between Cloud Service Providers (CSPs) and customers.
• Build and deploy custom applications for data protection, encryption, and key lifecycle management.
• Assist in the definition and implementation of Service Control Policies and service configuration controls.
• Validate existing services, Terraform Enterprise (TFE) modules, and infrastructure resources for compliance with data protection and cryptography standards.
• Create and enhance technical documentation including:
• Playbooks for data protection operations
• Audit and compliance documentation
• Architecture and implementation guides

• Strong understanding of core cryptographic concepts and protocols.
• Expertise in cloud-native encryption and Key Management Services (KMS), particularly within GCP.
• Hands-on experience with Terraform, GitHub, and Infrastructure-as-Code (IaC) frameworks.
• Familiarity with Key Management standards (e.g., FIPS 140-2, NIST 800-57) and Public Key Infrastructure (PKI).
• Experience with key lifecycle management, including generation, rotation, revocation, and auditing.
• Ability to prototype secure solutions, implement configuration controls, and integrate with CI/CD pipelines.
• Strong communication and documentation skills.

• Prior work in financial services or other highly regulated environments.
• Familiarity with additional CSPs such as AWS or Azure and their crypto offerings.
• Understanding of Service Control Policies and compliance frameworks like PCI DSS, ISO 27001, or HIPAA.

If this is a role that interests you and youd like to learn more, click apply now and a recruiter will be in touch with you to discuss this great opportunity. We look forward to speaking with you!

About ManpowerGroup, Parent Company of: Manpower, Experis, Talent Solutions, and Jefferson Wells

ManpowerGroup (NYSE: MAN), the leading global workforce solutions company, helps organizations transform in a fast-changing world of work by sourcing, assessing, developing, and managing the talent that enables them to win. We develop innovative solutions for hundreds of thousands of organizations every year, providing them with skilled talent while finding meaningful, sustainable employment for millions of people across a wide range of industries and skills. Our expert family of brands Manpower, Experis, Talent Solutions, and Jefferson Wells creates substantial value for candidates and clients across more than 75 countries and territories and has done so for over 70 years. We are recognized consistently for our diversity - as a best place to work for Women, Inclusion, Equality and Disability and in 2022 ManpowerGroup was named one of the World's Most Ethical Companies for the 13th year - all confirming our position as the brand of choice for in-demand talent.