Key Management Engineer — Automation & Security

State Street; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

State Street is seeking a Cryptographic Key Management Operations Engineer to manage the full cryptographic key lifecycle across cloud, on-premises, and IoT environments. You will ensure secure generation, distribution, rotation, revocation, and retirement of encryption keys in line with regulatory requirements and security policies.

You will work with cybersecurity, cloud, and DevSecOps teams to maintain availability, reliability, and security of enterprise key management services supporting

Qualifications

• Experience supporting cryptographic operations and key management platforms in regulated environments.
• Strong understanding of cryptographic key lifecycle management and PKI.
• Hands-on experience with HSMs and enterprise KMS solutions.

Responsibilities

• Support enterprise cryptographic key management services across cloud, on-prem, and IoT.
• Manage secure generation, storage, rotation, revocation, and retirement of keys.
• Monitor incidents, ensure timely remediation and regulatory compliance.
• Maintain availability, integrity, and security of key management infrastructure.
• Collaborate with cybersecurity, cloud, infrastructure, and DevSecOps teams.
• Automate key management processes using APIs, IaC, and orchestration tools.
• Provide operational, compliance, and risk reporting on key usage and lifecycle events.
• Contribute to runbooks, procedures, and technical documentation.

Skills

Cryptography

Key lifecycle management

PKI

HSMs

Security operations

Automation scripting

Cloud security

IoT security

Cross-team collaboration

Regulatory compliance

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or related field

Equivalent practical experience considered

Tools

AWS KMS

Azure Key Vault

OCI Vault

Fortanix DSM

Job description

State Street is seeking a Cryptographic Key Management Operations Engineer to manage the full cryptographic key lifecycle across cloud, on-premises, and IoT environments. You will ensure secure generation, distribution, rotation, revocation, and retirement of encryption keys in line with regulatory requirements and security policies.

You will work with cybersecurity, cloud, and DevSecOps teams to maintain availability, reliability, and security of enterprise key management services supporting