Encryption Engineer: Secure-by-Design DevSecOps

State Street; Greater London; On-site; GBP 89,000 - 151,000; Full time

Job summary

State Street seeks an Encryption Engineer to embed secure-by-design encryption and key management into SDLC and DevSecOps pipelines, advancing Encryption-by-Design across enterprise patterns.

The role involves building reusable automation, APIs, IaC modules, and reference architectures, aligning cryptographic standards across cloud and on‑prem environments, and driving automated compliance evidence.

Qualifications

• 8+ years in software engineering, DevSecOps, platform engineering, or related field.
• Experience integrating security controls into SDLC processes, CI/CD pipelines, and modern software delivery platforms.
• Hands-on with encryption technologies, cryptographic key management, and enterprise data protection controls.
• IaC tools such as Terraform, CloudFormation, or equivalent automation frameworks.
• Proficiency in programming or scripting languages (Python, Java, Go, or similar).

Responsibilities

• Embed encryption and key management controls into SDLC processes, DevSecOps pipelines, and platform engineering patterns.
• Design and implement secure-by-default encryption capabilities for application teams.
• Develop reusable automation, APIs, templates, and IaC modules to accelerate encryption adoption.
• Integrate key management, secrets management, and certificate management into developer workflows and CI/CD toolchains.
• Establish automated guardrails and policy-driven controls across the SDLC.

Skills

DevSecOps

Encryption

Platform engineering

CI/CD

Python

Education

Bachelor's degree in CS/Info Sec/Software Eng

Tools

Terraform

Jenkins

Kubernetes

CloudFormation

OpenShift

Job description

State Street seeks an Encryption Engineer to embed secure-by-design encryption and key management into SDLC and DevSecOps pipelines, advancing Encryption-by-Design across enterprise patterns.

The role involves building reusable automation, APIs, IaC modules, and reference architectures, aligning cryptographic standards across cloud and on‑prem environments, and driving automated compliance evidence.