Cryptography Platform and Services Technologist Lead

BNY Mellon • Pittsburgh, PA

3d • $83,000 - $178,000

About The Position

BNY is seeking a Cryptography Platform and Services Technologist Lead to join its Cybersecurity Organization. The position is based in NYC/NJ, Lake Mary, Florida, or Pittsburgh, Pennsylvania. The role leads enterprise cryptography key and asset management solutions, including their design, implementation, and support. It also responds to inquiries from lines of business, Internal Audit, and federal regulators; trains enterprise teams on PKI platforms, HSMs, and key management systems; and collaborates with compliance teams to align solutions with applicable regulatory frameworks.

The position calls for extensive cybersecurity, architecture, key management, and PKI experience, including hands-on work with HSMs and products such as Thales CipherTrust and Oracle Key Vault. The role also draws on knowledge of cryptographic algorithms and principles, security policies, cloud services, network equipment, and relevant standards and compliance frameworks. Global financial services security experience is preferred.

BNY describes its culture as supporting employee growth and success and emphasizes technology, collaboration, and innovation in financial services. The company offers competitive compensation, benefits, and wellbeing programs, paid leaves including paid volunteer time, and potential eligibility for an annual discretionary incentive award. Eligible employees may enroll in a 401(k) plan and participate in company-sponsored medical, dental, vision, and basic life insurance plans, with other benefits and paid time off dependent on the position offered.

Requirements

• Master’s degree in information security or a related field.
• 5–10+ years of work experience in cybersecurity, architecture design, key management, and PKI solutions.
• Experience with key management, HSMs, Thales products (including CipherTrust and DPOD), and Oracle Key Vault.
• Knowledge of HSMs, RSA SecurID, cryptographic algorithms such as RSA and AES, and protocols such as SSL/TLS, IPsec, SSH, and Kerberos.
• Knowledge of security policies, disaster recovery, change management, risk assessment, and threat modeling.
• Knowledge of security within cloud services such as AWS and Azure; Cisco routers and switches; and IoT.
• Knowledge of ISO/IEC 27001, PCI DSS, X.509, IEEE 802.1X, FISMA, NIST, MITRE, COBIT, and ITIL.
• Ability to train enterprise teams on HSMs and key management systems.
• Knowledge of cryptographic algorithms and principles, including digital signatures and blockchain systems.
• Familiarity with compliance frameworks such as GDPR, DORA, NIST, and ISO 27001.
• Experience with key management systems, HSMs, and PKI platforms.
• Practical experience with PKI, HSM, RSA SecurID, PGP, cryptographic algorithms such as RSA and AES, and protocols such as SSL/TLS, IPsec, SSH, and Kerberos.
• Practical experience with Thales HSMs, Thales SaaS products, Thales CipherTrust, and Oracle Key Vault.
• Hands-on experience with Thales products and Oracle key management products.
• Strong communication skills for presenting key management concepts to technical and non-technical audiences.
• Experience with cybersecurity policies, cryptographic algorithms, PKI, HSMs, and key management systems.

Nice To Haves

• Experience in the global financial services security ecosystem is preferred.
• Certifications such as CISSP, Cisco Certified Entry Network Technician (CCENT), or Certified Technical Trainer (CTT).

Responsibilities

• Lead BNY key management solutions across the enterprise.
• Design, implement, and support cryptography key management solutions across the enterprise.
• Design, implement, and support cryptography asset management solutions across the enterprise.
• Respond to requests from lines of business, Internal Audit, and federal regulators concerning BNY’s key management ecosystem.
• Train the enterprise on PKI platforms, HSMs, and key management systems.
• Collaborate with compliance teams to align solutions with regulatory frameworks such as GDPR, DORA, NIST, and ISO 27001.

Benefits

• Competitive compensation and wellbeing programs.
• Generous paid leaves, including paid volunteer time.
• Potential eligibility for an annual discretionary incentive award.
• Eligible employees may enroll in a 401(k) plan.
• Eligible employees may participate in company-sponsored medical, dental, vision, and basic life insurance plans.
• Other benefits, including vacation and sick time, may be available depending on the position offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior