Corporate Vice President - PKI & Data Protection Engineer

Location Designation: Hybrid - 3 days per quarter 

As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting-edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth — driving the company's success.

Role Overview

New York Life is seeking a technically skilled and hands-on Public Key Infrastructure (PKI) and Data Protection Engineer to design, implement, and oversee the enterprise’s PKI and data protection strategy. This role combines strategic ownership with engineering execution across a broad set of data protection domains, including Certificate Lifecycle Management (CLM), Public Key Infrastructure (PKI), Data Security Posture Management (DSPM), Data Loss Prevention (DLP), Data Access Governance (DAG), Data Classification, Encryption and Masking, Key and Secrets Management, Database Activity Monitoring (DAM).

The PKI & Data Protection Engineer will architect and implement solutions, lead proof-of-concepts, and partner with technology teams, engineering groups, and business stakeholders to ensure that protective controls meet enterprise needs. The role will directly oversee specialized sub-domains by managing the CLM/PKI operations, DAM operations, and other related functions, ensuring integration across the data protection ecosystem.

This position is ideal for a senior security engineer or architect with cloud experience, proven leadership ability, and who enjoys both setting direction and building solutions.

What You’ll Do:

Strategy & Design
- Work with the Security team senior leadership to define and own the enterprise PKI and data protection strategy, with a focus on practical design and implementation.
- Architect data protection solutions across CLM, PKI, DSPM, DLP, DAG, encryption, key management, and DAM,.
- Translate regulatory and business requirements into technical controls and designs.
- Align PKI and data protection strategy with business use cases, including secure enablement of cloud operations, AI and advanced analytics.
Implementation & Engineering
- Lead the design, configuration, and integration of CLM and data protection technologies across cloud and on-premises environments.
- Partner with infrastructure, application, and cloud engineering teams to embed controls into enterprise platforms and workflows.
- Oversee development, tuning, and testing for CLM, PKI, DSM, DLP, and other protection technologies.
- Evaluate new technologies and run proof-of-concepts to inform architecture decisions.
Leadership & Oversight
- Manage and mentor technical leads (CLM Operations, DAM, etc.), ensuring cohesive execution across sub-domains.
- Serve as the highest escalation point for complex technical data protection challenges.
- Define engineering standards, playbooks, and operational processes to ensure repeatable and sustainable practices.
- Foster collaboration with business stakeholders to ensure protection measures support, rather than hinder, business objectives.
Continuous Improvement
- Measure and report on the effectiveness of data protection controls, with a focus on tuning for accuracy and minimizing business friction.
- Identify and implement automation and integration opportunities to improve efficiency and reduce manual processes.
- Stay current with emerging data protection technologies and regulatory requirements, ensuring NYL remains ahead of evolving risks.

What You’ll Bring:

- 8+ years of hands-on experience in information security engineering, with deep expertise in at multiple data protection domains (e.g., CLM, PKI, encryption, DAM, DLP, DSPM).
- Strong track record in architecting and implementing enterprise data protection solutions.
- Technical proficiency with leading tools and platforms such as AppViewX, Venafi, Digicert, Microsoft CA, Zscaler, Varonis, Imperva, Purview, Netskope.
- Familiarity with cloud-native security controls (AWS, Azure, GCP), PKI, data discovery/classification, key management solutions.
- Experience translating compliance requirements into technical architectures.
- Strong communication and collaboration skills to work with engineers, developers, and business stakeholders.
Education & Certifications
- Bachelor’s degree in Cybersecurity, Computer Science, or rel