Encryption‑as‑a‑Service (EaaS) Platform Engineer

State Street•Berwyn, PA

About The Position

We are seeking a security-minded technology professional with experience in encryption, key management, cybersecurity, and platform engineering who is passionate about protecting data and enabling secure technology solutions. The ideal candidate combines technical expertise with strong collaboration skills and is comfortable working across engineering, infrastructure, cloud, and application teams. This individual will play an important role in advancing enterprise encryption capabilities by helping design, implement, integrate, and support standardized encryption and key management services. They should be capable of working independently on assigned initiatives while partnering with senior team members to drive adoption of secure, scalable, and user-friendly solutions.

Requirements

Experience working with cybersecurity, cloud, infrastructure, or platform engineering technologies.
Understanding of encryption, key management, certificates, secrets management, or related security controls.
Strong analytical and problem-solving skills with the ability to work through complex technical issues.
Ability to collaborate effectively across multiple teams and communicate technical concepts to both technical and non-technical stakeholders.
A continuous improvement mindset with an interest in automation, process optimization, and operational excellence.
Strong organizational skills and the ability to manage multiple priorities simultaneously.
A customer-focused approach with a commitment to delivering reliable and scalable technology services.
Curiosity, initiative, and a desire to continuously expand technical and business knowledge.
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent work experience.
5+ years of experience in cybersecurity, infrastructure engineering, cloud engineering, platform engineering, application development, or related technology functions.
Experience supporting or implementing encryption, key management, secrets management, certificate management, or cloud security solutions.
Familiarity with cloud platforms such as AWS, Microsoft Azure, OCI, or Google Cloud Platform.
Experience developing scripts and automation solutions using languages such as Python, PowerShell, Bash, Java, C#, or Go.
Working knowledge of REST APIs, API integrations, and service-based architectures.
Experience with infrastructure-as-code and automation frameworks such as Terraform, Ansible, Jenkins, Harness, or similar CI/CD platforms.
Familiarity with source control and software development practices using tools such as Git, Bitbucket, or JFog.
Understanding of software development frameworks and application architectures, including Spring Boot, microservices, and event-driven architectures, is a plus.
Knowledge of security frameworks, risk management principles, secure coding practices, and cybersecurity best practices.
Familiarity with cloud-native key management and secrets management technologies, including AWS KMS, Azure Key Vault, Google Cloud KMS, Fortanix DSM, or similar platforms, is preferred.
Industry certifications such as AWS Cloud Practitioner, AWS Security Specialty, Azure Security Engineer Associate, CISSP, or equivalent are a plus.
Experience working in a regulated industry, financial services environment, or large enterprise organization is preferred.

Nice To Haves

Experience working with container and cloud-native technologies such as Docker, Kubernetes, OpenShift, or cloud-native platform services is desirable.
Understanding of software development frameworks and application architectures, including Spring Boot, microservices, and event-driven architectures, is a plus.
Familiarity with cloud-native key management and secrets management technologies, including AWS KMS, Azure Key Vault, Google Cloud KMS, Fortanix DSM, or similar platforms, is preferred.
Industry certifications such as AWS Cloud Practitioner, AWS Security Specialty, Azure Security Engineer Associate, CISSP, or equivalent are a plus.
Experience working in a regulated industry, financial services environment, or large enterprise organization is preferred.

Responsibilities

Support the development, implementation, and ongoing enhancement of enterprise encryption and key management services across cloud and on-premises environments.
Partner with application, infrastructure, and platform teams to onboard new use cases and integrate centralized encryption and key management capabilities into business solutions.
Contribute to the design and implementation of self-service capabilities, automation, and operational processes that improve the scalability and usability of encryption services.
Assist in defining and maintaining service documentation, onboarding procedures, support models, and operational runbooks.
Implement and support integrations with centralized key management platforms, cloud-native key management services, and related cryptographic technologies.
Monitor service performance, troubleshoot issues, and coordinate with stakeholders to drive timely resolution of operational and technical challenges.
Support compliance with cybersecurity policies, technical standards, and regulatory requirements related to data protection, encryption, and key management.
Participate in technology evaluations, process improvements, and automation initiatives that enhance service reliability, efficiency, and customer experience.
Serve as a trusted partner to development and infrastructure teams by providing guidance on encryption best practices, onboarding requirements, and service consumption patterns.

Benefits

our retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks