Senior Cryptographic Key Management Operations Engineer

STATE STREET BANK AND TRUST COMPANY; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

STATE STREET BANK AND TRUST COMPANY is seeking a Cryptographic Key Management Operations Engineer to oversee end-to-end cryptographic key lifecycle management across cloud, on‑premises, and IoT environments. The role emphasizes secure generation, distribution, rotation, revocation, and retirement of encryption keys in alignment with regulatory standards.

The ideal candidate blends cryptography expertise with operations excellence, automation, and continuous improvement, partnering with

Qualifications

• Bachelor's degree or equivalent practical experience.

Responsibilities

• Support enterprise cryptographic key management services across cloud, on-prem, and IoT.
• Manage full key lifecycle: secure generation, storage, distribution, rotation, revocation, retirement.
• Monitor incidents: key compromise, expiration, policy violations, operational failures.
• Ensure availability, integrity, and security of key management infrastructure.
• Collaborate with cybersecurity, cloud, infrastructure, and DevSecOps teams.
• Automate key management with APIs, KMS, IaC, and security tooling.
• Support secure transaction processing and data protection.
• Develop and maintain runbooks, procedures, and documentation.
• Produce compliance and risk reports on key usage and lifecycle events.
• Stay current with cryptography and PQC developments.

Skills

Analytical thinking

Problem-solving

Automation mindset

Cross-team collaboration

Strong communication

Risk management

Security awareness

Continuous learning

Attention to detail

Education

Bachelor's degree in Computer Science/Info Security

Security certifications (CISSP/CISM/CCSP/AWS Security)

Tools

AWS KMS

Azure Key Vault

OCI Vault

Fortanix DSM

Job description

STATE STREET BANK AND TRUST COMPANY is seeking a Cryptographic Key Management Operations Engineer to oversee end-to-end cryptographic key lifecycle management across cloud, on‑premises, and IoT environments. The role emphasizes secure generation, distribution, rotation, revocation, and retirement of encryption keys in alignment with regulatory standards.

The ideal candidate blends cryptography expertise with operations excellence, automation, and continuous improvement, partnering with