Key Management Engineer - Automation & Security

STATE STREET BANK AND TRUST COMPANY; Singapore; On-site; SGD 120,000 - 170,000; Full time

Job summary

State Street Bank and Trust Company seeks a Cryptographic Key Management Operations Engineer to manage end-to-end lifecycle of cryptographic keys across cloud, on-prem, IoT, and infrastructure environments, ensuring secure generation, storage, rotation, revocation, and retirement with regulatory alignment.

You will collaborate with cybersecurity, cloud, infrastructure, engineering, and DevSecOps teams to integrate cryptographic services into enterprise applications and security frameworks, while

Qualifications

• Bachelor’s degree in CS/Cybersecurity/IS/Engineering or related field; equivalent practical experience.

Responsibilities

• Support day-to-day operation and security of enterprise cryptographic key management services, ensuring compliance with financial industry regulations and standards, including PCI DSS, GDPR, FIPS 140-3, and NIST guidance.
• Manage the complete cryptographic key lifecycle, including secure key generation, storage, distribution, rotation, revocation, escrow, and retirement across cloud, on-premises, and IoT environments.
• Monitor, investigate, and respond to key management incidents, including key compromise, expiration, policy violations, and operational failures, ensuring timely remediation and risk mitigation.
• Maintain the availability, integrity, and security of key management infrastructure, troubleshooting issues and ensuring adherence to service level objectives.
• Partner with cybersecurity, cloud, infrastructure, engineering, and DevSecOps teams to integrate cryptographic services into enterprise applications, platforms, and security frameworks.
• Automate and optimize key management processes using APIs, Key Management Systems (KMS), infrastructure-as-code (IaC), and security orchestration technologies.
• Support secure transaction processing and data protection by ensuring highly available and resilient key management services.
• Develop and maintain operational procedures, standards, runbooks, and technical documentation related to key management services.
• Produce operational, compliance, and risk reporting related to key usage, lifecycle events, service performance, and audit requirements.
• Stay current with emerging cryptographic technologies, evolving threat landscapes, post-quantum cryptography developments, and regulatory requirements to continuously improve key management practices.

Skills

Cryptography

Key management

Automation

Cloud security

Scripting

IaC

Regulatory compliance

Cross-team collaboration

Education

Bachelor’s degree or equivalent

3+ years in cryptographic operations or key management

PKI, certificate management, HSMs

AWS KMS, Azure Key Vault, OCI Vault, Fortanix DSM

PCI DSS, FIPS 140-3, NIST, ISO 27001

Cloud-native security experiences

IoT security and device identity management

SIEM monitoring experience

Python/PowerShell; Terraform

Jira & Confluence familiarity

Security certifications (CISSP, CISM, CCSP, AWS Security Specialty) preferred

Post-quantum cryptography exposure desirable

Tools

AWS KMS

Azure Key Vault

OCI Vault

Fortanix DSM

Terraform

Python

PowerShell

Jira

Confluence

Job description

State Street Bank and Trust Company seeks a Cryptographic Key Management Operations Engineer to manage end-to-end lifecycle of cryptographic keys across cloud, on-prem, IoT, and infrastructure environments, ensuring secure generation, storage, rotation, revocation, and retirement with regulatory alignment.

You will collaborate with cybersecurity, cloud, infrastructure, engineering, and DevSecOps teams to integrate cryptographic services into enterprise applications and security frameworks, while