Cryptography Engineer, Vice President
About The Position
The Cryptography Engineer, Vice President will serve as a senior member of the Global Cybersecurity organization responsible for the design, engineering, automation, and operation of enterprise cryptographic services. This role will lead the implementation and support of Public Key Infrastructure (PKI), certificate lifecycle management, key management solutions, and cryptographic security controls across the enterprise. The successful candidate will partner with application, infrastructure, cloud, security, and architecture teams to deliver secure, scalable, and automated cryptographic services that support the firm's security, regulatory, and operational requirements. This position requires a strong combination of engineering expertise, operational leadership, and strategic thinking to modernize cryptographic capabilities, reduce risk, and support the organization's cryptographic agility and post-quantum readiness initiatives.
Requirements
- Deep understanding of Public Key Infrastructure (PKI) and X.509 certificate technologies.
- Strong knowledge of cryptographic algorithms, protocols, and security architectures.
- Experience managing enterprise Certificate Authorities and certificate lifecycle platforms.
- Experience with certificate automation technologies and machine identity management.
- Knowledge of Hardware Security Modules (HSMs), key management systems, and cryptographic controls.
- Experience supporting cloud-native security services within Azure and AWS environments.
- Experience integrating security controls into DevOps and CI/CD pipelines.
- Strong understanding of authentication, identity, and access management concepts.
- Knowledge of regulatory and industry standards including NIST, PCI-DSS, FFIEC, and related security frameworks.
- Strong troubleshooting, analytical, and problem-solving skills.
- Ability to communicate effectively with technical and executive stakeholders.
- Bachelor's degree in Computer Science, Engineering, Information Security, or related field.
- 7+ years of experience in Cybersecurity, Cryptography, PKI, or Security Engineering.
- 5+ years of experience designing and operating enterprise PKI and certificate management solutions.
Nice To Haves
- Professional certifications such as CISSP, CCSP, GIAC, Security+, or equivalent are preferred.
- Experience with KeyFactor, DigiCert, Microsoft ADCS, Venafi, Sectigo, or similar platforms is highly desirable.
- Experience with cryptographic agility and post-quantum cryptography initiatives is preferred.
Responsibilities
- Design, implement, and operate enterprise PKI platforms, Certificate Authorities (CAs), and trust services.
- Manage the lifecycle of digital certificates including issuance, renewal, revocation, monitoring, and discovery.
- Lead the engineering and adoption of certificate automation technologies including ACME, EST, SCEP, and API-based integrations.
- Design and maintain enterprise key management solutions and cryptographic controls supporting applications, infrastructure, cloud platforms, and machine identities.
- Partner with application and infrastructure teams to onboard systems to enterprise PKI and certificate management services.
- Engineer secure solutions for code signing, SSH certificates, workload identities, and machine-to-machine authentication.
- Drive migration from legacy and unmanaged certificates to enterprise-standard certificate management platforms.
- Develop automation solutions that improve operational efficiency, scalability, and compliance.
- Support cloud cryptography integrations with Azure, AWS, and other strategic technology platforms.
- Participate in security architecture reviews to ensure cryptographic controls meet corporate standards and industry best practices.
- Monitor cryptographic risks, identify control gaps, and implement remediation plans.
- Support audit, compliance, regulatory, and risk management activities related to cryptography and PKI.
- Produce operational metrics, risk indicators, and reporting for senior management and governance forums.
- Contribute to the firm's post-quantum cryptography (PQC) strategy and cryptographic agility initiatives.
- Document standards, procedures, architectures, and operational practices.
- Provide technical leadership and mentoring to engineers and project teams.
Benefits
- our retirement savings plan (401K) with company match
- insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
- paid-time off including vacation, sick leave, short term disability, and family care responsibilities
- access to our Employee Assistance Program
- incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
- eligibility for certain tax advantaged savings plans
- inclusive development opportunities
- flexible work-life support
- paid volunteer days
- vibrant employee networks
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
