Amgen - Specialist - Information Security

Amgen; Hyderabad; On-site; INR 4,000,000 - 5,600,000; Full time

Job summary

Amgen is seeking a Specialist Information Security - Encryption Agility Engineer to lead the enterprise Encryption Agility Service for PQC readiness. You will drive discovery, CBOM development, and remediation guidance across cryptographic domains, working with PKI, cloud key services, and security engineering teams.

You will implement remediation patterns, coordinate CA modernization efforts, and mentor L4 analysts while contributing to policy-to-engineering guidance and SSDLC controls.

Qualifications

• Hands-on enterprise cryptography expertise (PKI, TLS, HSM, secrets management).
• Experience with cryptographic discovery, CBOM, and remediation tracking.
• Knowledge of post-quantum cryptography and crypto agility.
• Ability to translate policy into CI/CD SSDLC guidance.

Responsibilities

• Execute Encryption Agility Service workstreams and track roadmaps.
• Operate cryptographic discovery across systems (source code, binaries, cloud, endpoints, PKI).
• Build and improve CBOM using CycloneDX 1.6+ format with ownership and remediation status.
• Analyze cryptographic outputs, certificates, cipher suites, TLS/SSH/OAuth patterns, and key storage.
• Document remediation patterns approved by Principal Architect.
• Coordinate with PKI teams on certificate visibility and CA modernization.
• Collaborate with Application Security, DevOps, and EA to publish crypto libraries and patterns.
• Apply quantum-risk prioritization to discovery and remediation for critical apps.

Skills

Enterprise cryptography

PKI & X.509

Post-quantum crypto

Crypto agility

Remediation planning

Education

CISSP

CCSP

AWS Certified Security - Specialty

Tools

CycloneDX

KMS / HSMs

CI/CD tooling

PKI tooling

Job description

About the Role :

The Specialist Information Security - Encryption Agility Engineer will serve as a senior hands‑on engineer for Amgen's enterprise Encryption Agility Service for Post‑Quantum Cryptography (PQC) Readiness Preparation. This role supports the execution of technical work needed to build and operate Amgen's enterprise cryptographic inventory, discovery workflows, Cryptographic Bill of Materials (CBOM), remediation tracking, and engineering guidance for encryption, cryptography, crypto agility, and post‑quantum readiness.

Roles & Responsibilities :

• Execute assigned Encryption Agility Service workstreams, including intake analysis, backlog execution, roadmap tracking, service metrics, reporting inputs, SOP updates, and service improvement actions.
• Operate enterprise cryptographic discovery across source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, and SBOM inputs.
• Build, maintain, and improve the Amgen CBOM using CycloneDX 1.6+ as the target format, including required fields, source systems, ownership attributes, quantum‑vulnerability status, remediation status, and asset correlation.
• Analyze cryptographic scan outputs, source code findings, certificate chains, cipher suite configurations, TLS, SSH, OAuth, SAML, JWT patterns, cloud key configurations, and key or secret storage patterns.
• Implement and document remediation patterns approved by the Principal Architect, including hybrid TLS, proxy‑based crypto agility, Network encapsulation, IPsec, MACsec, KMIP, PKCS#11, provider libraries, and custom code libraries.
• Coordinate with DIAS, PKI service owners, and certificate management teams on certificate visibility, CLM evaluation, rotation, automation migration, post‑quantum PKI readiness, and CA modernization.
• Partner with Application Security, AI Security, Enterprise Architecture, DevOps, and engineering teams to publish approved cryptographic libraries, secure code examples, reusable patterns, CI/CD controls, and SSDLC requirements.
• Apply Amgen's approved quantum risk‑prioritization approach to discovery and remediation planning for business‑critical applications, high‑volume sensitive data flows, third‑party dependencies, and GxP systems.
• Support vendor and third‑party technical governance by preparing technical questionnaire content, CBOM requests, evidence reviews, and supplier remediation follow‑up.
• Provide technical escalation and mentoring for L4 analysts and maintain cryptographic knowledge articles and implementation guides.

Must‑Have Skills :

• Strong hands‑on knowledge of enterprise cryptography, including PKI, X.509 certificates, TLS, cipher suites, KMS, HSMs, secrets management, key lifecycle, encryption at rest/transit, and cloud key services.
• Practical experience with cryptographic discovery, CBOM‑driven inventory, source code scanning, network/endpoint telemetry, and remediation tracking.
• Working knowledge of post‑quantum cryptography, crypto agility, NIST‑approved algorithms, hybrid transition patterns, and risk‑prioritized remediation.
• Ability to convert cryptographic policy and architecture direction into actionable engineering guidance across CI/CD, SSDLC, cloud, identity, and third‑party governance.

Professional Certifications :

• CISSP (preferred)
• CCSP, AWS Certified Security - Specialty, Microsoft Azure Security Engineer, or equivalent (preferred)
• CISM, CISA, or CRISC (preferred)
• Security+, SSCP, or equivalent (preferred)
• Relevant PKI, KMS, HSM, or post‑quantum cryptography training/certification (preferred)