Director – Cryptographic Architecture & Engineering

American Express

. Define enterprise cryptographic architecture and strategic patterns across payment and non-payment environments, applications, APIs, databases, cloud platforms and infrastructure .

Posted 10/14/2026full-timeUnited StatesLead💰 $144,250 - $256,250 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cryptographic engineering and cybersecurity architecture, with a strong focus on enterprise cryptographic solutions, key management, and compliance with industry standards. Proficient in translating security requirements into effective technical architectures and fostering collaboration across engineering and cybersecurity teams.

Highest-signal resume keywords

Cryptographic EngineeringPost-Quantum CryptographyHSM and Key ManagementCloud KMS ArchitecturesPayment Cryptography

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Symmetric and Asymmetric CryptographyEncryptionDigital SignaturesHashingTLSKey Establishment and ExchangeModern Cryptographic ProtocolsCryptographic Key Lifecycle ManagementArchitecture-as-CodeAutomated SDLC Security Enforcement

Soft Skills

Communication of Complex ConceptsMentoringCollaboration

Tools & Technologies

HSMPKICloud PlatformsAWSAzureGCPBlockchainDistributed Ledger Technologies

Certifications & Qualifications

PCI Compliance

Industry Keywords

CybersecurityFinancial ServicesRegulated EnvironmentCryptographic InventoryCryptographic Bill of Materials

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformSDLC

About the role

Key responsibilities & impact

Define enterprise cryptographic architecture and strategic patterns across payment and non-payment environments, applications, APIs, databases, cloud platforms and infrastructure
Lead post-quantum cryptography readiness and crypto-agility, including cryptographic inventory and CBOM, identification of quantum-vulnerable implementations, migration patterns and modernization roadmaps
Provide architecture leadership for payment cryptography, including payment HSMs, payment key management, cryptographic key hierarchies and applicable PCI requirements
Design modern approaches for enterprise encryption, key management, HSM/HSMaaS, PKI and certificates, digital signatures and cloud-native cryptography
Evaluate emerging cryptographic technologies and use cases, including blockchain and distributed ledgers, advanced digital-signature approaches and other modern cryptographic techniques
Translate Data Security standards into architecture-as-code, reusable engineering patterns, reference implementations, APIs and automated guardrails
Partner directly with engineering teams to prototype, validate and implement cryptographic solutions rather than relying solely on architecture documentation
Integrate cryptographic requirements and security telemetry into the SDLC and Permit to Operate, enabling earlier identification and enforcement of security requirements
Drive adoption of strategic enterprise cryptographic services and identify opportunities to simplify or retire fragmented and legacy implementations
Assess cryptographic risk based on algorithm strength, key protection, data sensitivity, threat exposure, implementation architecture and evolving industry standards
Provide senior technical leadership for significant cryptographic vulnerabilities, incidents, architecture decisions and technology transformations
Mentor architects and engineers and raise cryptographic engineering capability across the organization

Requirements

What you’ll need

Significant experience in cryptographic engineering, cybersecurity architecture, applied cryptography or security engineering in a large-scale technology environment
Deep knowledge of symmetric and asymmetric cryptography, encryption, digital signatures, hashing, TLS, key establishment and exchange, and modern cryptographic protocols
Strong experience with HSMs, enterprise key-management systems, PKI, certificates and cryptographic key lifecycle management
Experience designing encryption solutions across applications, APIs, databases, infrastructure and cloud environments
Demonstrated ability to translate security requirements into working technical architectures and reusable engineering patterns
Software engineering or automation capability sufficient to develop prototypes, integrations, policy or architecture-as-code and technical reference implementations
Experience working across engineering, architecture, product and cybersecurity organizations
Ability to communicate complex cryptographic concepts, risks and architecture decisions to engineering teams and senior leadership
Post-quantum cryptography (PQC), NIST PQC standards and enterprise crypto-agility programs
Experience within financial services or another highly regulated environment
Cloud KMS and HSM architectures across AWS, Azure and/or GCP
Large-scale cryptographic migrations or modernization programs
Payment cryptography, payment HSMs, payment key management and PCI requirements
Highly desired: Cryptographic inventory and Cryptographic Bill of Materials (CBOM) capabilities
Highly desired: Blockchain and distributed-ledger cryptography and associated key and signature architectures
Highly desired: DevSecOps, architecture-as-code, policy-as-code and automated SDLC security enforcement
Hands-on engineering capability is strongly preferred

Benefits

Comp & perks

Bonus
Equity (if applicable)
Benefits