Cryptography Engineer – Vice President

State Street

. Design, implement, and operate enterprise PKI platforms, Certificate Authorities, and trust services .

Posted 9/22/2026full-timeQuincy • Massachusetts • United StatesLead💰 $120,000 - $202,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and operating enterprise PKI platforms, managing digital certificate lifecycles, and implementing cryptographic controls. Proficient in cloud security integrations and certificate automation technologies, with a strong focus on compliance and risk management.

Highest-signal resume keywords

Enterprise PKI ManagementCertificate Automation TechnologiesCryptographic ControlsCloud Security IntegrationsRisk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Public Key Infrastructure (PKI)X.509 Certificate TechnologiesCryptographic AlgorithmsCertificate Lifecycle ManagementMachine Identity ManagementAuthentication and Identity ManagementDevOps Security IntegrationPost-Quantum CryptographyOperational Metrics DevelopmentTroubleshooting and Problem-Solving

Soft Skills

Effective CommunicationAnalytical SkillsTechnical LeadershipMentoring

Tools & Technologies

AzureAWSKeyFactorDigiCertMicrosoft ADCSVenafiSectigoHardware Security Modules (HSMs)CI/CD PipelinesCertificate Authorities

Certifications & Qualifications

CISSPCCSPGIACSecurity+

Industry Keywords

NISTPCI-DSSFFIECCryptographySecurity Frameworks

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Design, implement, and operate enterprise PKI platforms, Certificate Authorities, and trust services
Manage digital certificate issuance, renewal, revocation, monitoring, and discovery
Lead adoption of certificate automation technologies including ACME, EST, SCEP, and API-based integrations
Design and maintain enterprise key management solutions and cryptographic controls
Partner with application and infrastructure teams to onboard systems to enterprise PKI and certificate management services
Engineer solutions for code signing, SSH certificates, workload identities, and machine-to-machine authentication
Drive migration from legacy and unmanaged certificates to enterprise-standard certificate management platforms
Develop automation solutions to improve operational efficiency, scalability, and compliance
Support cloud cryptography integrations with Azure, AWS, and other strategic technology platforms
Participate in security architecture reviews
Monitor cryptographic risks, identify control gaps, and implement remediation plans
Support audit, compliance, regulatory, and risk management activities related to cryptography and PKI
Produce operational metrics, risk indicators, and reporting for senior management and governance forums
Contribute to post-quantum cryptography strategy and cryptographic agility initiatives
Document standards, procedures, architectures, and operational practices
Provide technical leadership and mentoring to engineers and project teams

Requirements

What you’ll need

Bachelor's degree in Computer Science, Engineering, Information Security, or related field
7+ years of experience in Cybersecurity, Cryptography, PKI, or Security Engineering
5+ years of experience designing and operating enterprise PKI and certificate management solutions
Deep understanding of Public Key Infrastructure (PKI) and X.509 certificate technologies
Strong knowledge of cryptographic algorithms, protocols, and security architectures
Experience managing enterprise Certificate Authorities and certificate lifecycle platforms
Experience with certificate automation technologies and machine identity management
Knowledge of Hardware Security Modules (HSMs), key management systems, and cryptographic controls
Experience supporting cloud-native security services within Azure and AWS environments
Experience integrating security controls into DevOps and CI/CD pipelines
Strong understanding of authentication, identity, and access management concepts
Knowledge of NIST, PCI-DSS, FFIEC, and related security frameworks
Strong troubleshooting, analytical, and problem-solving skills
Ability to communicate effectively with technical and executive stakeholders
Professional certifications such as CISSP, CCSP, GIAC, Security+, or equivalent are preferred
Experience with KeyFactor, DigiCert, Microsoft ADCS, Venafi, Sectigo, or similar platforms is highly desirable
Experience with cryptographic agility and post-quantum cryptography initiatives is preferred

Benefits

Comp & perks

Retirement savings plan (401K) with company match
Basic life, medical, dental, and vision insurance
Long-term disability insurance
Optional additional insurance coverages
Paid vacation and sick leave
Short-term disability
Family care responsibilities leave
Employee Assistance Program
Annual performance-based incentive compensation
Tax-advantaged savings plans
Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Employee networks