Encryption Engineer at RR Donnelley — NeverHard

Job Description RRD is seeking a highly specialized Encryption and Enterprise Data Resiliency Engineer to ensure our organization's business availability and data security. The ideal candidate will design, implement, and maintain our continuous data protection, modernized data backup systems, and enterprise encryption architecture, strictly adhering to resilience standards and ensuring data is backed by leveraging a Hardware Root of Trust. Responsibilities Encryption & Key Operations Management Implement and manage Encryption Data Security Platforms that protect sensitive data at rest in accordance with RRD IT Governance policies. Administer centralized Key Management (KMS) and manage encryption policies across databases, file systems, and cloud storage where applicable. Support audit and compliance requirements (e.g., SOC2, PCI, HIPAA) regarding data encryption. Manage Luna Hardware Security Module (HSM) partitions for high-assurance cryptographic operations (signing, hashing, and root key storage). Backup & Data Protection Manage and optimize all Backup & Replication environments, including virtual, physical, and cloud workloads. Oversee backup job scheduling, monitoring, and troubleshooting to ensure 100% success rates. Perform regular backup/restore testing to validate the recoverability of critical systems. Utilize Dell Avamar and Data Domain integration for high-efficiency variable-length deduplication and image-level proxy management. Manage Veeam Backup & Replication, including protecting Salesforce data, configuring Linux-based hardened repositories with immutability, and enabling Instant VM Recovery. Disaster Recovery & Continuity Administer technologies that extend real-time replication and continuous data protection (CDP). Update and maintain Disaster Recovery Plans (DRP) and lead quarterly failover drills to meet RTO/RPO targets. Ensure site-to-site connectivity and storage consistency during recovery scenarios. Implement Zerto Virtual Manager (ZVM) and Virtual Replication Appliances (VRAs) for real-time replication mapping. Configure the Zerto Journal for point-in-time recovery, enabling the ability to "rewind" application stacks to the exact second before a ransomware or corruption event. Design Virtual Protection Groups (VPGs) for multi-tier applications to ensure write-order fidelity. Automate one-click failover and execute non-disruptive disaster recovery testing in isolated "bubble" networks or dedicated cloud tenants. Orchestrate seamless workload mobility, including cloud migrations (Azure/AWS), cross-hypervisor replication (VMware to Hyper-V), and intra-cloud disaster recovery if required. System Maintenance & Optimization Monitor storage capacity and performance related to backup repositories. Apply patches, firmware updates, and version upgrades to data protection and data encryption software. Collaborate with the Security Operations teams to integrate immutability and air-gapped backup solutions to combat ransomware. Additional Responsibilities Participates in the design, planning, installation, testing, implementation, and support of new hardware and software as well as evaluation and recommendation of current and potential vendors. Provides leadership and/or liaison for design efforts within specific business domains, including best practices, business alignment, and requirements for supporting infrastructure. Responds to Service Desk referrals of end-user requests for help solving PC hardware, software, peripheral, or production equipment-related problems or issues. Prioritizes problems based on severity, urgency, and impact on the business; tracks all outstanding incidents until successful resolution. May hand off extremely complex technical problems to higher-level support or other IT department staff if required. Troubleshoots any technical difficulty with hardware and software issues, configurations, and peripheral equipment. Works with enterprise support groups and outside vendors to resolve problems or issues. Coordinates through the change management process to move, install, upgrade, remove and configure site IT assets and supporting infrastructure. Maintains the asset management system (additions/changes/deletions) for accurate tracking of all IT assets within the site(s). Identifies and recommends budgetary items based on infrastructure additions/improvements/removals. Supports and conducts routine audits of site IT assets and processes to ensure compliance with established company policies and procedures, as well as compliance with Governmental regulations and policies. Performs other related duties and participates in special projects as assigned.