Senior Cryptographic Key Management Engineer

State Street; Singapore; On-site; SGD 140,000 - 220,000; Full time

Job summary

State Street is seeking a Cryptographic Key Management Operations Engineer to manage the end-to-end lifecycle of cryptographic keys across cloud, on-premises, and IoT environments. The role focuses on secure key generation, distribution, rotation, revocation, and retirement while ensuring regulatory compliance and enterprise policies.

Ideal candidates combine cryptography expertise with a passion for automation, operational excellence, and continuous improvement.

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 3+ years of cryptographic operations or key management experience in financial services or regulated industry.
• Strong understanding of cryptographic key lifecycle management including PKI and HSMs.
• Experience with automation and scripting (Python, PowerShell, Terraform).
• Familiarity with security standards (PCI DSS, FIPS 140-3, NIST, ISO 27001).
• Knowledge of cloud-native security services and IoT security is a plus.

Responsibilities

• Support day-to-day operation and security of enterprise cryptographic key management services across cloud, on-premises, and IoT environments.
• Manage key generation, storage, distribution, rotation, revocation, escrow, and retirement; ensure regulatory compliance.
• Monitor and respond to key management incidents; maintain availability and service levels.
• Collaborate with cybersecurity, cloud, infrastructure, engineering, and DevSecOps teams to integrate cryptographic services into applications.
• Automate key management processes using APIs, KMS, IaC, and security orchestration.

Skills

Cryptography

Key lifecycle mgmt

Automation

Python

Terraform

IaC

SIEM

Cloud security

Agile

Jira/Confluence

Post-quantum cryptography

Education

Bachelor's degree in CS/Cybersecurity/Info Security

Tools

AWS KMS

Azure Key Vault

OCI Vault

Fortanix DSM

Job description

State Street is seeking a Cryptographic Key Management Operations Engineer to manage the end-to-end lifecycle of cryptographic keys across cloud, on-premises, and IoT environments. The role focuses on secure key generation, distribution, rotation, revocation, and retirement while ensuring regulatory compliance and enterprise policies.

Ideal candidates combine cryptography expertise with a passion for automation, operational excellence, and continuous improvement.