Director - PKI Solution Engineering

DTCC • Jersey City, NJ

2d • $125,000 - $220,000 • Hybrid

About The Position

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance. Being a member of IT Cybersecurity Engineering and Operations at DTCC, your purpose is to provide best-in-class and versatile security services to the enterprise. As a Senior Solution Engineer within Cybersecurity Engineering, you will serve as the technical leader for DTCC's Public Key Infrastructure (PKI) services and cryptographic trust platforms. You will be responsible for advancing the architecture, strategy, and modernization of enterprise PKI capabilities while helping DTCC prepare for the next generation of cryptographic technologies. This role will drive the evolution of DTCC's certificate management and trust services, including modernization of internal certificate authorities, automation of external PKI ecosystems, expansion of cloud-native PKI capabilities, adoption of crypto-agile architectures, and support for post-quantum cryptography (PQC). You will partner closely with engineering, operations, security, architecture, and application teams to establish scalable patterns and standards that strengthen DTCC's security posture while enabling innovation across the enterprise. This role is an Individual Contributor role. You will serve as the senior technical authority for PKI architecture and strategy, working alongside engineering and operations teams to define the future of enterprise cryptographic services.

Requirements

• Minimum of 10 years of related experience
• Bachelor's degree preferred and/or equivalent experience
• Deep expertise in Public Key Infrastructure (PKI), certificate authority technologies, certificate lifecycle management, cryptographic protocols, and trust architectures.
• Strong understanding of modern authentication, machine identity, workload identity, cloud security, and cryptographic automation patterns.
• Demonstrated experience designing enterprise-scale security architectures and driving large-scale modernization initiatives.
• Ability to influence technology direction through technical leadership, architecture expertise, and strategic vision.
• Presents information clearly in writing and orally in larger group settings.
• Convinces others on key topics by presenting persuasive arguments and alternative approaches.
• Inspires different approaches or ways of working.
• Inspires teams to constructively challenge established views.
• Sets an example for others by personally embracing change and building ownership through technical leadership and collaboration.

Responsibilities

• Serve as the senior technical advisor and subject matter expert for Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic trust services, and enterprise certificate consumption patterns.
• Define and drive the strategic roadmap for PKI modernization, ensuring DTCC's certificate and trust infrastructure remains secure, scalable, resilient, and aligned with evolving business and regulatory requirements.
• Lead the design and modernization of internal certificate authority (CA) platforms and supporting trust services, establishing target architectures, engineering standards, and implementation roadmaps.
• Develop enterprise patterns and best practices for automated certificate issuance, ephemeral certificate usage, workload identity, machine authentication, and crypto-agile application design.
• Architect and guide the implementation of cloud-native PKI capabilities across public cloud environments, enabling secure certificate services for modern applications, platforms, and infrastructure.
• Drive the automation and modernization of external PKI services and certificate management processes, improving scalability, reliability, operational efficiency, and risk reduction.
• Lead DTCC's technical strategy for cryptographic agility and post-quantum cryptography (PQC) adoption, evaluating emerging standards, technologies, and migration approaches while defining implementation guidance for engineering teams.
• Establish PKI reference architectures, trust models, certificate governance standards, and integration patterns that support consistent adoption across enterprise platforms and applications.
• Evaluate emerging technologies, vendor solutions, and architectural approaches to strengthen DTCC's cryptographic security posture and accelerate modernization initiatives.
• Collaborate with engineering, architecture, security, infrastructure, and application teams to ensure cryptographic requirements and trust services are embedded into enterprise technology solutions.
• Act as a trusted advisor to senior technology and business leaders, communicating PKI strategy, architecture decisions, implementation risks, and modernization priorities.
• Mentor engineers, architects, and technical leads through architecture reviews, technical guidance, and knowledge sharing, helping elevate cryptographic expertise across the organization.
• Represent PKI and cryptographic trust services within enterprise architecture forums, strategic initiatives, and cross-functional programs to ensure long-term alignment with DTCC's technology and cybersecurity strategy.

Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree