Cryptographic Agility & Post-Quantum (PQC) Engineer

State Street • Quincy, MA

3d

About The Position

State Street is seeking a Cryptographic Agility & Post-Quantum (PQC) Engineer to help shape and deliver the firm's enterprise cryptographic modernization strategy. This role is ideal for a cybersecurity professional with a strong foundation in cryptography, encryption technologies, and security engineering who is passionate about preparing the organization for emerging cryptographic threats, including the impact of quantum computing. The successful candidate will partner across cybersecurity, architecture, engineering, infrastructure, and application teams to establish and operationalize a formal cryptographic agility capability. You will help ensure the organization can efficiently identify cryptographic dependencies, evaluate emerging standards, and execute controlled transitions to new cryptographic algorithms while maintaining security, compliance, and business continuity.

Requirements

• Understanding of modern cryptographic concepts, encryption technologies, PKI, certificate management, and key management systems.
• Experience assessing security risks and translating technical findings into actionable remediation plans.
• Ability to collaborate effectively across diverse technology and business teams to drive enterprise-wide initiatives.
• Strong analytical and problem-solving skills with a structured approach to complex technical challenges.
• Curiosity and a desire to stay current with advancements in cybersecurity, cryptography, and quantum computing.
• Excellent written and verbal communication skills, including the ability to present technical concepts to both technical and non-technical audiences.
• A proactive mindset focused on continuous improvement, operational excellence, and risk reduction.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, Mathematics, or a related discipline, or equivalent work experience.
• 5+ years of experience in cybersecurity, security engineering, encryption, PKI, key management, infrastructure security, or a related field.
• Working knowledge of cryptographic algorithms, protocols, and security controls used in enterprise environments.
• Experience with enterprise operating systems, cloud platforms, and distributed application architectures.
• Familiarity with cloud platforms such as AWS, Microsoft Azure, OCI, or Google Cloud Platform.
• Exposure to post-quantum cryptography concepts, cryptographic inventory/discovery tools, or cryptographic risk assessments.
• Experience supporting security compliance frameworks, cybersecurity standards, and audit activities.
• Experience developing scripts or automation solutions using languages such as Python, PowerShell, Bash, Java, C#, or Go.
• Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Jenkins, Harness, or similar CI/CD platforms.

Nice To Haves

• Experience working within highly regulated financial services or other complex enterprise environments is a plus.
• Industry certifications such as CISSP, Certified Encryption Specialist (ECES), or similar certifications are desirable.

Responsibilities

• Mature the enterprise Cryptographic Agility program, enabling the organization to respond effectively to evolving cryptographic risks and industry standards.
• Develop and maintain an inventory of cryptographic assets, dependencies, algorithms, protocols, certificates, keys, and related technologies across applications, platforms, and infrastructure.
• Identify systems utilizing vulnerable, deprecated, or legacy cryptographic algorithms and define remediation and migration strategies.
• Evaluate emerging post-quantum cryptography (PQC) standards and technologies, with a focus on NIST-approved cryptographic algorithms and industry best practices.
• Define approved cryptographic migration paths, transition frameworks, and implementation guidance for application and platform teams.
• Partner with enterprise architecture, platform engineering, application development, PKI, and infrastructure teams to assess cryptographic readiness and capabilities.
• Pilot and validate PQC-enabled technologies, services, and solutions to support future enterprise adoption.
• Develop standards, procedures, and technical guidance supporting cryptographic agility and quantum readiness initiatives.
• Monitor changes in the cryptographic landscape, including advancements in quantum computing, regulatory expectations, and industry standards.
• Produce metrics, dashboards, and executive reporting to track cryptographic risk, migration progress, and PQC readiness across the enterprise.
• Contribute to strategic security initiatives focused on strengthening the organization's long-term cryptographic resilience.

Benefits

• our retirement savings plan (401K) with company match
• insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
• paid-time off including vacation, sick leave, short term disability, and family care responsibilities
• access to our Employee Assistance Program
• incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
• eligibility for certain tax advantaged savings plans
• inclusive development opportunities
• flexible work-life support
• paid volunteer days
• vibrant employee networks

What This Job Offers

• Job Type: Full-time
• Career Level: Senior