Encryption Agility Team Architect

Amgen; Hyderabad; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Amgen seeks a Senior Specialist Information Security Architect to lead encryption agility and PQC readiness. You will define the enterprise cryptography target state and govern standards across PKI, KMS, and certificates, collaborating with diverse teams to push the PQC program forward.

The role combines deep hands-on cryptography with architectural leadership, ensuring secure, scalable patterns for data at rest and in transit while aligning with Amgen’s 2030 quantum-ready goals.

Qualifications

• Doctorate or master's or bachelor’s with extensive information security/cryptography experience.
• Expert hands-on knowledge of enterprise cryptography, PKI, TLS, and KMS.
• Experience translating cryptographic policy into technical controls and SSDLC.
• Strong ability to lead architecture discussions and mentor engineers.

Responsibilities

• Serve as Principal Architect for Encryption Agility Service and define the technical roadmap.
• Develop enterprise target-state architecture for encryption, cryptography, and PQC readiness.
• Translate PQC standards into reference architectures and secure patterns.
• Collaborate with multiple teams to publish cryptographic libraries and remediation playbooks.
• Review cryptographic findings and provide practical remediation guidance.

Skills

Crypto architecture

PQC readiness

Policy enforcement

Hands-on cryptography

CI/CD security

Education

Doctorate degree

Master's degree

Bachelor's degree

Diploma

Tools

AWS KMS

AWS Secrets Manager

Sectigo

HashiCorp Vault

Veracode

GitLab

Qualys

Guard

Job description

Role Name: Principal Information Security Architect - Encryption Agility Team

Job Posting Title: Senior Specialist Information Security - Encryption Agility Team Architect

Workday Job Title: Senior Specialist Information Security

Department Name: Trusted Core Technologies

Role GCF: 6A

About Amgen

Amgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver innovative medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today.

About The Role

Role Description:

The Senior Specialist Information Security - Encryption Agility Team Architect will serve as the Principal Architect for Amgen's enterprise Encryption Agility Service for Post-Quantum Cryptography (PQC) Readiness Preparation. This role is the senior technical authority for enterprise encryption, cryptography, crypto agility, and post-quantum cryptography architecture across Amgen. The role partners with the Senior Manager Information Security - Encryption Agility Service Lead to translate Amgen's post-quantum roadmap into governed standards, reference architectures, implementation patterns, discovery requirements, remediation patterns, test plans, and production rollout guidance. The role is expected to be deeply technical and hands-on, while also able to influence enterprise architecture, application, cloud, infrastructure, identity, Public Key Infrastructure (PKI), Key Management Services (KMS), certificate management, Digital Identity Access Services (DIAS), Operational Technology (OT), and third-party stakeholders.

The architect will define what good looks like for Amgen's 2030 quantum-ready target state and work backward to establish the architecture, tooling, policies, and patterns needed to get there. The role will create practical architecture for the Cryptographic Bill of Materials (CBOM), cryptographic discovery, Certificate Lifecycle Management (CLM), key and secret management, algorithm transition, Steal-Now-Decrypt-Later (SNDL) mitigation, Post-Quantum Public Key Infrastructure (PQ-PKI), hybrid Transport Layer Security (TLS), approved cryptographic libraries, and compensating controls for legacy or unchangeable applications. The individual must be comfortable reviewing source code findings, certificate chains, cipher suite data, cloud key configurations, secrets management patterns, tool integrations, and vendor cryptographic evidence.

This role does not replace teams that already own infrastructure, PKI/certificates, applications, identity, cloud, or OT. Instead, it sets the architecture and technical standards for how encryption and cryptography must be used, discovered, measured, modernized, and governed across those domains, and coordinates with service owners to make the PQC transition practical, measurable, and controlled in a global, regulated environment.

Roles & Responsibilities:

• Serve as the Principal Architect and senior technical authority for the Encryption Agility Service, partnering with the Senior Manager to define the technical roadmap, architecture backlog, design guardrails, quality expectations, and enterprise architecture direction for Post-Quantum Cryptography (PQC) readiness.
• Develop Amgen’s enterprise target-state architecture for encryption, cryptography, crypto agility, and PQC readiness across applications, cloud, infrastructure, identity, PKI, KMS, certificates, secrets, data protection, SaaS, third-party ecosystems, and related security configuration baselines.
• Translate NIST PQC standards and related cryptography guidance into Amgen reference architectures, secure patterns, technology standards, security configuration baselines, engineering implementation guidance, and CBOM operating model and data architecture, including required fields, source systems, ownership attributes, quantum-vulnerability status, remediation status, data quality checks, reporting views, SBOM alignment, SME inputs, and CycloneDX 1.6+ alignment.
• Define cryptographic discovery architecture, tool integration requirements, and technical evaluation criteria across source code, binaries, cloud key services, endpoints, file systems, network traffic, PKI and certificates, KMS and secrets, vendor attestations, SBOMs, GRC, SIEM/data lake, cryptographic discovery platforms.
• Partner with DIAS, PKI service owners, certificate management teams, identity teams, cloud, infrastructure, and platform teams on certificate visibility, CLM requirements, Microsoft PKI, Sectigo, AWS ACM, AWS Private CA, hybrid certificate testing, CA modernization, operational change windows, enterprise KMS strategy, HSM patterns, secrets management, key lifecycle policy, key rotation and retirement, storage standards, ownership, reporting, and centralized or federated control options.
• Design remediation and crypto-agility patterns for hybrid TLS, proxy-based crypto agility, network encapsulation, IPsec, MACsec, KMIP, PKI standards, provider libraries, custom code libraries, symmetric cryptography, HMAC, legacy and unchangeable applications, TLS termination, reverse proxies, encrypted overlays, segmentation controls, compensating controls, and risk-based replacement or decommission pathways.
• Provide hands-on technical review of cryptographic scan outputs, source code findings, certificate chains, cipher suite configurations, SSH, OAuth, SAML, JWT patterns, cloud key configurations, CBOM data, key storage, secret storage, and other cryptographic implementation patterns.
• Partner with Application Security, AI Security, Enterprise Architecture, DevOps, and engineering teams to publish approved cryptographic libraries, secure code examples, reusable patterns, CI/CD controls, SSDLC requirements, scanning rules, developer remediation playbooks, and practical guidance for data at rest, data in transit, identity protocols, APIs, certificates, secrets, key stores, service-to-service communication, external data exchanges, and high-value sensitive data flows.
• Apply Amgen’s approved quantum risk-prioritization approach to help sequence discovery and remediation for business-critical applications, high-volume sensitive data flows, third-party dependencies, identity services, legacy platforms, KCS, validated/GxP systems, and OT scope; lead architecture and design reviews for PQC pilots and trials, including test environment requirements, hybrid TLS testing, PQ-PKI experiments, cryptographic discovery proofs of concept, CLM/KMS evaluations, algorithm interoperability, performance impact, and rollout readiness.
• Support vendor, third-party, OT, and manufacturing architecture governance with Procurement, Legal, Risk and Compliance, TPRM, business owners, and site stakeholders by defining technical questionnaire content, CBOM requests, evidence expectations, roadmap review criteria, contract language inputs, escalation triggers, passive-only discovery assumptions, vendor firmware roadmaps, boundary architecture, validated system impacts, revalidation planning, and handoffs where direct remediation ownership remains outside the Encryption Agility Service.
• Maintain and refresh cryptographic architecture artifacts, Security Configuration Baselines (SCBs), SOPs, technical standards, exception patterns, remediation decision trees, and implementation guides; provide top-level technical escalation for architecture exceptions, discovery tool gaps, false-positive triage, certificate lifecycle risks, key management patterns, protocol and cipher decisions, vendor evidence gaps, and complex remediation tradeoffs; mentor L5 and L4 engineers, analysts, and contributors; and maintain awareness of IETF, NSA CNSA 2.0, ISO, HIPAA, HITRUST, and broader industry cryptography guidance to translate changes into Amgen architecture decisions and backlog items.

Basic Qualifications and Experience:

• Doctorate degree and 2 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience OR
• Master's degree with 8 to 10 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience OR
• Bachelor's degree with 10 to 14 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience OR
• Diploma with 14 to 18 years of Information Security, Cybersecurity, Cryptography, Security Architecture, Computer Science, Information Technology, Engineering, or related experience

Functional Skills:

Must-Have Skills:

• Expert hands-on knowledge of enterprise cryptography and security architecture, including PKI, X.509 certificates, TLS, cipher suites, KMS, HSMs, secrets management, key lifecycle, encryption at rest, encryption in transit, cloud key services, identity protocols, and certificate lifecycle automation.
• Practical experience architecting cryptographic modernization, crypto agility, post-quantum cryptography, hybrid transition patterns, discovery-to-remediation workflows, CBOM-driven inventory, and Steal-Now-Decrypt-Later risk reduction in a complex enterprise environment.
• Strong ability to translate cryptographic policy and standards into enforceable technical controls across CI/CD, SSDLC, cloud platforms, PKI/certificates, KMS/secrets, identity, infrastructure, applications, third-party governance, and risk management.
• Ability to perform hands-on analysis of cryptographic discovery findings, source code patterns, certificate chains, TLS/cipher data, cloud key configurations, key rotation status, secrets exposure, and architecture designs, then convert findings into practical remediation guidance.

Good-to-Have Skills:

• Hands-on experience with ServiceNow CMDB/GRC, Guard, Wiz, Qualys, Fortinet, Netskope, CrowdStrike, GitLab, Veracode, GitGuardian, AWS KMS, AWS ACM, AWS Secrets Manager, Microsoft PKI, Sectigo, HashiCorp Vault, HSMs, CLM platforms, and SIEM/data lake integrations.
• Experience designing or operating CBOM/SBOM data models using CycloneDX 1.6+, APIs, CSV, JSON, dashboards, data quality controls, and audit-ready reporting.
• Experience designing PKI modernization, certificate automation, certificate rotation, CA hierarchy changes, hybrid certificate testing, and PQ-PKI transition plans.
• Experience designing key management and secrets management architecture across AWS, Azure, on-premises platforms, HSMs, Vault technologies, automation workflows, and centralized or federated operating models.
• Experience with application security, DevSecOps, SSDLC governance, CI/CD quality gates, approved cryptographic libraries, static/dynamic/ Composition analysis, and developer enablement.
• Experience in regulated environments where architecture changes may trigger validation or quality review.
• Experience with vendor and third-party risk management, supplier cryptographic questionnaires, contract requirement inputs, roadmap evidence review, SaaS dependencies, and vendor escalation.
• Scripting and automation experience with Python, PowerShell, Bash, REST APIs, data pipelines, parsing of certificate or scan data, or lightweight integration development.

Professional Certifications:

• CISSP (required)
• CISM, CISA, or CRISC (preferred)
• CCSP, AWS Security - Specialty, Azure Security Engineer, or equivalent (preferred)
• TOGAF or SABSA (preferred)
• ITIL, SAFe, product management, program management (preferred)
• Relevant PKI, KMS, HSM, cryptographic discovery, certificate lifecycle management, cloud key management, or post-quantum training/certification (preferred)

Soft Skills:

• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong technical leadership and architecture facilitation skills.
• Strong verbal and written communication skills for technical, business, legal, procurement, compliance, and executive audiences.
• Ability to translate complex cryptographic and quantum risk into clear business impact, architecture decisions, and practical remediation options.
• Ability to influence without direct authority across global security, DTI, DIAS, procurement, legal, compliance, OT, infrastructure, cloud, and application teams.
• High degree of initiative, accountability, judgment, and self-motivation in ambiguous or evolving technical domains.
• Ability to manage multiple architecture priorities, competing stakeholder needs, and long-running transformation roadmaps successfully.
• Team oriented, with a focus on shared outcomes, reusable patterns, practical implementation, and service maturity.
• Ability to balance hands-on technical analysis with enterprise architecture leadership and service governance.
• Strong coaching and mentoring for L5 and L4 engineers, analysts, and contributors.
• Strong presentation, documentation, and public speaking skills for architecture forums, technical reviews, and leadership updates.
• Comfort building a new enterprise capability and helping mature operating models, architecture governance, metrics, and standards from the ground up.

EQUAL OPPORTUNITY STATEMENT

Amgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

We will ensure that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.