VP of Cryptographic Key Management & Ops

State Street Fund Services (Singapore) Pte. Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

State Street Fund Services Singapore Pte. Limited is seeking a Cryptographic Key Management Operations Engineer to manage end-to-end cryptographic key lifecycles across cloud, on-premises, and IoT environments.

You will ensure secure key generation, distribution, rotation, and retirement while maintaining compliance with PCI DSS, NIST, FIPS, and other standards. You will work with cybersecurity, cloud, and DevSecOps teams to deliver highly available key management services, automate processes,

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field.
• 3+ years of cryptographic operations or key management in regulated environments.
• Strong knowledge of PKI, symmetric/asymmetric crypto, and HSMs.

Responsibilities

• Oversee cryptographic key lifecycle across cloud and on-prem environments.
• Ensure secure key generation, storage, distribution, rotation, and retirement.
• Monitor incidents and ensure regulatory alignment (PCI DSS, NIST, FIPS).
• Collaborate with security, cloud, and DevSecOps teams to integrate KMS services.
• Automate processes using APIs, IaC, and scripting; maintain runbooks and docs.
• Provide reporting on key usage, lifecycle events, and audit requirements.

Skills

Cryptography

Key management

Cloud security

Automation

Scripting

IaC

KMS

Python

Terraform

PCI DSS

Education

Bachelor's degree in CS/Cybersecurity

Equivalent practical experience

Tools

AWS KMS

Azure Key Vault

OCI Vault

Fortanix DSM

Job description

State Street Fund Services Singapore Pte. Limited is seeking a Cryptographic Key Management Operations Engineer to manage end-to-end cryptographic key lifecycles across cloud, on-premises, and IoT environments.

You will ensure secure key generation, distribution, rotation, and retirement while maintaining compliance with PCI DSS, NIST, FIPS, and other standards. You will work with cybersecurity, cloud, and DevSecOps teams to deliver highly available key management services, automate processes,