Cryptographic Security Engineer

Citizens Financial Group•Johnston, RI

1d•$80,000 - $110,000

About The Position

The Cryptographic Engineer is a hands-on technical role responsible for supporting, implementing, and improving the organization's cryptographic platforms with a strong emphasis on operational stability, automation, and risk reduction. This role operates at the intersection of Cryptography, PKI, Certificate Lifecycle Management, Cloud Key Management, and Security Automation. The engineer will help maintain and enhance cryptographic services while contributing to strategic initiatives such as certificate lifecycle automation, cloud encryption adoption, and post-quantum cryptography readiness.

Requirements

3+ years of experience in Information Security, PKI, Cryptography, Infrastructure Security, or Security Engineering.
Experience implementing, supporting, or administering enterprise certificate management solutions.
Working knowledge of: TLS and X.509 certificates, PKI concepts and certificate lifecycle management, Cryptographic key management, Hardware Security Modules (HSMs)

Nice To Haves

Venafi (TLS Protect / Trust Protection Platform) or equivalent certificate management solutions
Thales CipherTrust, Luna HSM, or similar key management technologies
ServiceNow workflows, CMDB, or operational processes
Python
PowerShell
Bash or similar languages
REST APIs and system integrations.

Responsibilities

Support and enhance enterprise cryptographic platforms including: Public Key Infrastructure (PKI), TLS and certificate lifecycle management, Cloud key management services (AWS KMS, Azure Key Vault), Hardware Security Modules (HSMs)
Apply cryptographic best practices related to: Cryptographic algorithms and protocols, Key management and protection, Certificate trust models and lifecycle controls
Perform and support day-to-day cryptographic operations including: Certificate issuance, renewal, revocation, and validation, Key rotation and lifecycle management activities, Monitoring and responding to certificate and encryption-related incidents, Troubleshooting cryptographic service disruptions and operational issues
Hands-on experience with one or more of the following: Venafi (TLS Protect / Trust Protection Platform) or equivalent certificate management solutions, Thales CipherTrust, Luna HSM, or similar key management technologies, ServiceNow workflows, CMDB, or operational processes
Experience with scripting or automation using: Python, PowerShell, Bash or similar languages
Familiarity with REST APIs and system integrations.
Strong troubleshooting, analytical, and problem-solving skills.
Assist with API-based integrations to improve certificate and key management processes.
Participate in the organization's post-quantum cryptography (PQC) readiness initiatives by: Assisting with cryptographic inventory efforts, Identifying quantum-vulnerable algorithms and systems, Supporting crypto-agility assessments, Evaluating emerging cryptographic technologies and standards
Stay current with industry developments including NIST guidance, PQC standards, and evolving cryptographic best practices.